Skip to contentSkip to conversation

iptables and hostnames.

DISCUSSION gabrix 2 participants 2 messages Oct 4, 2006

lore
Share & tools
lore

gabrix

author
#0 lore raw

What is the reason why if i use this iptables:

Quoted 3 lines

# (APACHE)
$IPT -A INPUT -p tcp -d x.gabrix.ath.cx --dport 80 -m state --state ! INVALID -j ACCEPT $IPT -A INPUT -p tcp -d tor.gabrix.ath.cx --dport 443 -m state --state ! INVALID -j ACCEPT

the hostnames you see get resolved to their pubblic ips.This is on an inside lan pc but this doesn't happen on the gateway pc right before it where iptables says it can't resolve the hostnames .Why this ?I have debian sarge kernel 2.6 on all machines. Thanks !

#1 lore raw
Quoted 11 lines · gabrix

What is the reason why if i use this iptables:

Quoted 5 lines

# (APACHE)
$IPT -A INPUT -p tcp -d x.gabrix.ath.cx --dport 80 -m state --state ! INVALID -j ACCEPT
$IPT -A INPUT -p tcp -d tor.gabrix.ath.cx --dport 443 -m state --state ! INVALID -j ACCEPT

the hostnames you see get resolved to their pubblic ips.This is on an inside lan pc but this doesn't happen on the gateway pc right before it where iptables says it can't resolve the hostnames .Why this ?I have debian sarge kernel 2.6 on all machines.
Thanks !

What is the DNS for the gateway? Have you allowed the gateway to send DNS in the OUTPUT chain? - John

Signature · 8 lines
John A. Sullivan III
Open Source Development Corporation
+1 207-985-7880
[email protected]

If you would like to participate in the development of an open source
enterprise class network security management system, please visit
http://iscs.sourceforge.net