HN-based firewall dns problems [message #30181] |
Wed, 14 May 2008 16:21 |
adm1329
Messages: 6 Registered: February 2008
|
Junior Member |
|
|
I followed the instructions on setting up a HN-based firewall here
http://wiki.openvz.org/Setting_up_an_iptables_firewall
One of my containers is running a DNS server.
my nameserver is 127.0.0.1
if I try to ping or use dig on openvz.org I get
[root@host /]# ping openvz.org
ping: unknown host openvz.org
[root@host /]# dig openvz.org
; <<>> DiG 9.3.3rc2 <<>> openvz.org
;; global options: printcmd
;; connection timed out; no servers could be reached
If I stop the firewall on the HN it works fine so I know it's an issue somewhere in the firewall setup. I've got port 53 open, what other ports do I need open? I read somewhere that said outbound ports 1024-65535 TCP and UDP need to be open, if this is true how do I open just outbound ports using the HN firewall. While I have used iptables in the past, I'm not that familiar with configuring it.
|
|
|