<html>
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=windows-1250">
<meta name=Generator content="Microsoft Word 10 (filtered)">
<style>
<!--
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:Arial;}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
span.EmailStyle17
{font-family:Arial;
color:windowtext;}
@page Section1
{size:595.3pt 841.9pt;
margin:72.0pt 90.0pt 72.0pt 90.0pt;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt'>Hi</span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt'> </span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt'>I’ve been using Firehol for a few months but I’m still
pretty new to the whole topic of iptables. I’ve got a server set up
that’s using Firehol and that’s working great. The
firehol.conf is based on the lan-gateway example.</span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt'> </span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt'>Now I’ve had to set-up an extra server on a separate LAN and
separate broadband connection. The ‘modem’ used for this
provides the WLAN IP via DHCP and this also causes resolv.conf to have the
nameserver set to the modem’s IP (nameserver 192.168.1.1). I’ve
used the same firehol settings as before but this is now causing a problem as DNS
queries from the server to the modem are being blocked. I can get round
this by modifying resolv.conf to include other external DNS IPs but this isn’t
a good long term solution.</span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt'> </span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt'>For various reasons I can’t change the broadband modem or the way
it is set up and I need a proper firewall as the modem allows all external traffic
through to the server.</span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt'> </span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt'>What extra ‘rules’ do I need to put in firehol.conf to
allow DNS queries to flow between the server (external IP 192.168.1.2) and the
modem (192.168.1.1)?</span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt'> </span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt'>Thanks for your help.</span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt'> </span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt'>Regards</span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt'> </span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt'>Richard Williams</span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt'> </span></font></p>
<p class=MsoNormal><font size=3 color=navy face=Arial><span lang=EN-GB
style='font-size:12.0pt;color:navy'>****************************************************<br>
</span></font><font color=navy><span lang=EN-GB style='color:navy'>Richard
Williams</span></font><font color=navy><span lang=EN-GB style='color:navy'><br>
email:</span><span lang=EN-GB> <a href="mailto:richard@everything4it.co.uk">richard@everything4it.co.uk</a></span></font><font
color=navy><span lang=EN-GB style='color:navy'> </span><span lang=EN-GB><br>
</span></font><font color=navy><span lang=EN-GB style='color:navy'>mobile:
07981 734697<br>
**************************************************** </span><span lang=EN-GB><br>
</span></font><font size=2 color=black><span lang=EN-GB style='font-size:10.0pt;
color:black'>The contents of this email message and any attachments are
confidential and are intended solely for addressee. The </span></font><font
size=2 color=black><span lang=EN-GB style='font-size:10.0pt;color:black'>info</span></font><font
size=2 color=black><span lang=EN-GB style='font-size:10.0pt;color:black'>rmation
may also be legally privileged. This transmission is sent in trust, for the
sole purpose of delivery to the intended recipient. If you have received this
transmission in error, any use, reproduction or dissemination of this
transmission is strictly prohibited. If you are not the intended recipient,
please immediately notify the sender by reply email or at +44(0)7981 734697 and
delete this message and its attachments, if any</span></font><font size=2
color=black><span lang=EN-GB style='font-size:10.0pt;color:black'>.</span></font></p>
<p class=MsoNormal><font size=3 face=Arial><span lang=EN-GB style='font-size:
12.0pt'> </span></font></p>
</div>
</body>
</html>
<BR>
<P><FONT SIZE=2>--<BR>
No virus found in this outgoing message.<BR>
Checked by AVG Free Edition.<BR>
Version: 7.1.405 / Virus Database: 268.11.5/425 - Release Date: 22/08/2006<BR>
</FONT> </P>