Re: freebsd ipfw question

2022-02-21 Thread Timothe Litt
On 21-Feb-22 18:36, Randy Bush wrote: for some reason lost in time, i have the following in `/etc/ipfw.rules` on a freebsd system running bind9 add allow tcp from any to me 53 limit src-addr 1 setup add deny tcp from any to me 53 Except that rule wouldn't help.  I put the non-local 

Re: freebsd ipfw question

2022-02-21 Thread Randy Bush
> for some reason lost in time, i have the following in `/etc/ipfw.rules` > on a freebsd system running bind9 > > add allow tcp from any to me 53 limit src-addr 1 setup > add deny tcp from any to me 53 and now i know why # lsof -i :53 COMMAND PID USER FD TYPE DEVICE SIZ

Re: freebsd ipfw question

2022-02-18 Thread Timothe Litt
On 17-Feb-22 16:45, Randy Bush wrote: for some reason lost in time, i have the following in `/etc/ipfw.rules` on a freebsd system running bind9 add allow tcp from any to me 53 limit src-addr 1 setup add deny tcp from any to me 53 the results are 01000 48358531 6390772849 allo

Re: freebsd ipfw question

2022-02-17 Thread Mark Andrews
Only you can know what is “normal" for your configuration. Having more that 1 TCP connection from a source at a time is not abnormal. There is no requirement to use existing TCP connections for other queries. > On 18 Feb 2022, at 08:45, Randy Bush wrote: > > for some reason lost in time, i hav

freebsd ipfw question

2022-02-17 Thread Randy Bush
for some reason lost in time, i have the following in `/etc/ipfw.rules` on a freebsd system running bind9 add allow tcp from any to me 53 limit src-addr 1 setup add deny tcp from any to me 53 the results are 01000 48358531 6390772849 allow tcp from any to me 53 setup limit src-ad