On 5/26/05, Edwin L. Culp <[EMAIL PROTECTED]> wrote:

> this configuration there is no dns resolution.  The first problem.

> tcp_services = "{ 22, 25, 53, 80, 110, 113, 123, 143, 389 }"

> block all
> pass in on $ext_if inet proto tcp from any to ($ext_if) port
> $tcp_services flags S/SA keep state

DNS is UDP port 53, which you've blocked. 

-- 
Jon Simola
Systems Administrator
ABC Communications
_______________________________________________
freebsd-pf@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to