Download your favorite Linux distribution at LQ ISO.
Go Back > Forums > Linux Forums > Linux - Security
User Name
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.


  Search this Thread
Old 03-21-2010, 10:03 PM   #61
Registered: Mar 2010
Posts: 54

Original Poster
Rep: Reputation: 15

Yea that is a very good idea to tighten up the settings to the ISP DNS. So in that regard, if I wanted to use the internal machine as a nameserver for a public website, would it still be able to hand out replies to DNS requests?

Basically would limiting the outgoing rules on the nameserver and forwarding rules on the firewall to just the ISP nameservers prevent the internal nameserver from responding to public requests?

As I was reading the IP tables tutorial on ESTABLISHED and RELATED connections it sounded like it might not matter as we set the rules to allow connections that have been established, which would allow a response to be sent. However, please let me know if I am misinterpreting this or you think I am mistaken. Thanks for all your help.
Old 03-21-2010, 10:11 PM   #62
LQ Guru
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 379Reputation: 379Reputation: 379Reputation: 379
Yeah, the inbound DNS queries would be fine, due to the ESTABLISHED match.


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
Routing with public IPs crontab Linux - Networking 3 02-10-2009 06:11 AM
Can I use Public IPs on LAN dula Linux - Networking 1 06-07-2007 06:46 AM
NAT + public IPS (+ firestarter) Stefan Pantiru Linux - Networking 2 05-17-2005 05:43 AM
Public IPs behind router Buzer Linux - Networking 2 09-20-2003 01:36 PM
Sharing two public IPs. Unseen Linux - Networking 8 03-20-2003 01:17 PM > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 01:11 PM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration