Debian User Forums

by **thewolfro** » 2004-03-20 08:03

Hi I'm using Debian Woody, and i configured a master DNS
server on my network. It suposed to transfer the master zone
to my ISP but it doesn't. from the local network, the server
works fine, it resolves names and accepts telnet on port 53
from the local machines. if i try to use telnet from a
machine located in the internet it does not respond.
if i look in the netstat i see olnly the syn_sent flag.
I tried to do a namp from the external IP and it seens that
domain port is filtered. when i did the same thing but from
my local machine i can see that my domain port is opend.
in my firewall i have POLICY ACCEPT for the output and I have
accepted all the packets from that external IP address,
and from the ISP's DNS. i have tried olso to log from firewall
the connections from the external IP and it seems that i have
an incoming packet and a response to that (an outgoing packet)
so it seens to me that the problem is not im my firewall.
just to be shoure i have used the command
/etc/init.d/iptables clear (to get rid of the firewall), but no
results. telnet on other ports like 80 etc works fine.
can you help me??

by **MarkvD** » 2004-03-20 08:17

I'm not sure. can it have something to do with /etc/services?
Look for port 53 in this file on your firewall.
Tell us what it says in this line.

by **thewolfro** » 2004-03-20 08:27

i don't think it is from my firewall because without firewall, the telnet still doesn't work. the command "/etc/init.d/iptables clear" put Accept Plicy in all chains.
but if ypu like, the Iptable entry is something like

iptables -A INPUT -s $ip_from_the_internet -j ACCEPT
where ip_from_the_internet is the ip from where i try to use telnet on the 53' port
i

by **MarkvD** » 2004-03-20 08:49

I can't help right away, I have to look in to it!

by **thewolfro** » 2004-03-20 08:55

you want to see my firewall or my /etc/services file? i'm a little bit confuse

by **MarkvD** » 2004-03-21 07:26

I've looked in to it but I have to disapoint you.
I can't help you, sorry!

Maybe someone else?

by **thewolfro** » 2004-03-21 07:34

10x a lot i have allready tried on other forums but the people on those forums are not so active like those on this one. i have seen that they have read what i wrote but no answer from them.

10x again. and congratulations for this forum

by **MarkvD** » 2004-03-21 07:37

When you find the answer, let us know please I'm verry curious!

and thanks

Debian User Forums

DNS Problems

DNS Problems

Who is online