Re: Can't Resolve from behind firewall

From: khayes@eastbay.com
Date: 10/17/02


To: "Ahmed.Shazly" <ahmed.shazly@hotpop.com>
From: khayes@eastbay.com
Date: Thu, 17 Oct 2002 11:42:38 -0700


Have you tried taking at a look at the network traffic to see if the two
DNS servers are even getting past the handshake phase? From the limited
information I have, I'd have to venture a guess that they're not.

Ken Hayes
Network Administrator
Eastbay / Footlocker.com
Wausau, WI Offices
(715) 261-9573
khayes@eastbay.com

                                                                                                                            
                                                                                                                            
                                                                                                                            
                                                                                                                            
                                       To: <security-basics@securityfocus.com>
                                       cc:
              "Ahmed.Shazly" Subject: Can't Resolve from behind firewall
              <ahmed.shazly@hotpop.com
>
                                                                                                                            
              10/16/2002 05:15 PM
                                                                                                                            
                                                                                                                            

Hi everyone,
  I Just got a PIX 501 for my company and since they have strict policies i
do have to strict usage to port 80, now with the PDM i try permiting
outgoing traffic from the my local net on port 80 to any outside port and
permit outgoing traffic on port 53 for the DNS to any port since we use the
DNS server of our ISP. the only thing that happens is that i still can't
resolve websites and they only work if i use their IP addresses. i do use
PAT and i'm not sure wheather it has anything to do with whats going on any
suggestions?

Regards,
     A.Shazly

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- - - - - - - - - - - - - - -
The information in this e-mail, and any attachment therein, is confidential
and for use by the addressee only. If you are not the intended recipient,
please return the e-mail to the sender and delete it from your computer.
Although the Company attempts to sweep e-mail and attachments for viruses,
it does not guarantee that either are virus-free and accepts no liability
for any damage sustained as a result of viruses.



Relevant Pages

  • Re: Netgear RP114 Problem
    ... >> Does your router provide your pc's with an ip address via dhcp? ... By default the rp114 will do dhcp for the first 30 ip addresses or so ... you can set the DNS servers of your ISP. ... can open a port or range of ports to a host. ...
    (Fedora)
  • Re: Risks of not using isps DNS
    ... When you say "we are all getting" port probes, ... non local DNS servers does this make me a target for more of these ... are my dns lookups to that proxy still ... > The downside of not using your ISPs DNS server is that lookups ...
    (comp.security.firewalls)
  • Re: Port 32512 DNS queries
    ... | with replies from DNS servers to queries (inverse look-ups on the IP ... | addresses of the DNS servers listed in /etc/resolv.conf) issued from port ... Does anyone know of a Linux client process that runs ... BOFH excuse #448: The cause of the problem is: greenpeace free'd the mallocs ...
    (comp.os.linux.networking)
  • Re: 2K3 Server - 2 NICS, 1 External, 1 Internal.. Heres my problem...
    ... I believe before, I left the G/W and DNS Servers out of NIC 2, and I ... couldn't cruise the internet at all from within the building. ... >> This NIC is plugged Directly into the back of Port 1 of my 4 Port DSL ...
    (microsoft.public.windows.server.networking)
  • Re: clamav ports
    ... but it is possible that the port updated the virus ... > some viruses that it was catching before (and clamscan, I believe, can ... > Is there a new setting that I'm missing? ... Professional Web Design ...
    (freebsd-questions)