Messages in this thread | | | Date | Wed, 15 Dec 2004 01:43:04 +0100 | From | Wichert Akkerman <> | Subject | Re: bind() udp behavior 2.6.8.1 |
| |
Previously Adam Denenberg wrote: > i am aware that UDP is connectionless. However in terms of a firewall > this is different. It _must_ keep a state table of some sorts otherwise > high port outbound connections destined for a DNS server will never be > let back in b/c the firewall will just say "Why is this dns server > making a udp connection to port 32768 on this client?". Keeping a state > table allows this behavior thru the firewall as it should.
Just allow outgoing udp traffic from source port 53 from your DNS server and you're done.
Wichert.
-- Wichert Akkerman <wichert@wiggy.net> It is simple to make things. http://www.wiggy.net/ It is hard to make things simple. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |