HPE Community
Operating System - HP-UX
1832413 Members
2899 Online
110042 Solutions
New Discussion

IPfilter on DNS server---help needed

 
SOLVED
Go to solution
Rgomes
Valued Contributor

‎10-06-2003 06:19 AM

‎10-06-2003 06:19 AM

IPfilter on DNS server---help needed

Hi All,

On my DNS server( BIND 9.20+ 11i), I have install IPfilter. I like to open only tcp/udp port 53 for name server related querries/requests for all IP addresses. For that, what rule I have to implement, I need step by step procedure, as I don't have much time to go through the doc.

Please also put your recommendation.

Thanks in advance,
Richard
0 Kudos
Reply
2 REPLIES 2
James Specht
Trusted Contributor

‎10-06-2003 07:23 AM

‎10-06-2003 07:23 AM

Solution

Re: IPfilter on DNS server---help needed

If you only want allow DNS to the box add the following to your /etc/opt/ipf/ipf.conf file. Restart ipfilters and you should be good to go.


pass in quick proto udp from any to w.x.y.z/32 port = 53 keep state
pass out quick on ppp0 proto udp from a.b.c.d/32 to any port = 53 keep state

--Jim
"Everyone can be taught to sculpt: Michelangelo would have had to be taught how not to. So it is with the great programmers."
Reply
Rgomes
Valued Contributor

‎10-06-2003 06:03 PM

‎10-06-2003 06:03 PM

Re: IPfilter on DNS server---help needed

Hi JAmes,

Thanks for your mail.
I forgot to add, I have to open ssh port also( tcp/udp 22).
For that, what it would be look like then?

Thanks
Richard
0 Kudos
Reply
The opinions expressed above are the personal opinions of the authors, not of Hewlett Packard Enterprise. By using this site, you accept the Terms of Use and Rules of Participation.