Firewall Rules – pulling hair out....

  • I have a rule setup on the wan –> Lan, for my DNS Server that are behind the firewall

    Proto    Source    Port    Destination      Port            Gateway    Description 
    TCP          *          *      MyNetwork      53 (DNS)        *

    When I try to dig the dns from the outside the log says that the request was blocked.
    with @61 block drop in log quick all label "Default block all just to be sure"

    Act    Time                      If              Source                              Destination          Proto
      X      Mar 23 14:44:12      WAN            xxx.xx3.x6.18:53    TCP

    How do I fix.....

    The MyNetwork aliases has the DNS server in it with the /24

  • DNS uses UDP by default.


    :P :P :P :P