lkml.org 
[lkml]   [2000]   [Jul]   [6]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: Redirected dns packets rejected
Date
In message <Pine.LNX.3.96.1000705160212.9891G-100000@angusbay.vnl.com> you writ
e:
> As you can see, the dns request goes out from port 1435 to
> a real DNS server; but the reply comes back to that port
> from the cache serving on the firewall via it's internal
> REDIRECT. The linux workstation then seems to reject it.

Yep: this is correct. Without general connection tracking, there's no
way to map the `reply' packet back. You can use the
`bind-to-foreign-address' hack (if DNS proxy running as root) to
explicitly bind the UDP socket to the desired source address/port.

Hope that helps,
Rusty.
--
Hacking time.

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:57    [W:0.028 / U:0.904 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site