Re: Bind as cache DNS and firewall

2010-08-18 Thread Ulrich David
Rte de l'Industrie 29 CH-3960 Sierre Le 19 août 2010 à 08:21, Ulrich David a écrit : > Hi Jason and Robert, > > Sorry for my lack of details. > > My firewall has stateful inspection enabled for all port : > iptables -A INPUT -m state --state RELATED,ESTABLISHED -j A

Re: Bind as cache DNS and firewall

2010-08-18 Thread Ulrich David
decided to see if it's not my configuration which has a problem. Regards, David Le 19 août 2010 à 04:23, Jason Roysdon a écrit : > > On 08/18/2010 02:42 PM, Ulrich David wrote: >> Hi, >> >> I'm using Bind as a cache (absolutely not authoritative) DNS for a p

Bind as cache DNS and firewall

2010-08-18 Thread Ulrich David
Hi, I'm using Bind as a cache (absolutely not authoritative) DNS for a public network. I have put a firewall in order to refuse incoming packets from people not on my network. Today, inspecting logs, I see this : Aug 18 17:31:44 cns1 [IPT DROP] : IN=eth0 OUT= MAC=00 SRC=195.176.219.26 DST=M