topic IPfilter on DNS server---help needed in Operating System - HP-UX

IPfilter on DNS server---help needed

Rgomes — Mon, 06 Oct 2003 13:19:15 GMT

Hi All,

On my DNS server( BIND 9.20+ 11i), I have install IPfilter. I like to open only tcp/udp port 53 for name server related querries/requests for all IP addresses. For that, what rule I have to implement, I need step by step procedure, as I don't have much time to go through the doc.

Please also put your recommendation.

Thanks in advance,
Richard

Re: IPfilter on DNS server---help needed

James Specht — Mon, 06 Oct 2003 14:23:02 GMT

If you only want allow DNS to the box add the following to your /etc/opt/ipf/ipf.conf file. Restart ipfilters and you should be good to go.

pass in quick proto udp from any to w.x.y.z/32 port = 53 keep state
pass out quick on ppp0 proto udp from a.b.c.d/32 to any port = 53 keep state

--Jim

Re: IPfilter on DNS server---help needed

Rgomes — Tue, 07 Oct 2003 01:03:04 GMT

Hi JAmes,

Thanks for your mail.
I forgot to add, I have to open ssh port also( tcp/udp 22).
For that, what it would be look like then?

Thanks
Richard