- dns queries might go also over TCP, so allow it.
Approved by: rink MFC after: 1 week
This commit is contained in:
parent
eff9ee09b4
commit
ac5e6208c0
@ -194,6 +194,7 @@ case ${firewall_type} in
|
||||
${fwcmd} add deny tcp from any to any setup
|
||||
|
||||
# Allow DNS queries out in the world
|
||||
${fwcmd} add pass tcp from me to any 53 setup keep-state
|
||||
${fwcmd} add pass udp from me to any 53 keep-state
|
||||
|
||||
# Allow NTP queries out in the world
|
||||
@ -294,6 +295,7 @@ case ${firewall_type} in
|
||||
${fwcmd} add pass tcp from any to any setup
|
||||
|
||||
# Allow DNS queries out in the world
|
||||
${fwcmd} add pass tcp from ${oip} to any 53 setup keep-state
|
||||
${fwcmd} add pass udp from ${oip} to any 53 keep-state
|
||||
|
||||
# Allow NTP queries out in the world
|
||||
|
Loading…
Reference in New Issue
Block a user