Re: Firewall question

Uwe Dippel <[email protected]>
Newsgroups gmane.comp.security.firewalls.m0n0wall
Message-ID <[email protected]> 
On 06/30/2010 10:32 PM, Steve Yates wrote:
>
>> pass in quick proto tcp/udp from 172.16.1.0/24 port = 53 to 172.16.1.200 port = 53
>> keep state group 300
>>
> 	The source port for most TCP/IP requests is random so you probably need the source port to be "any" and the destination port to be port 53.
>
>

Steve, 100% correct!

Thanks for the help,

Uwe
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.