Re: [Hampshire] Iptables forward DNS

Top Page

Reply to this message
Author: Adrian Bridgett
Date:  
To: Hampshire LUG Discussion List
Subject: Re: [Hampshire] Iptables forward DNS
On Mon, Apr 14, 2008 at 18:00:09 +0100 (+0100), Peter Brooks wrote:
> Hi all,
> I'm trying to setup to forward from our ISP provided DNS to my
> internal network, the ISP gives us an address of 150.5.200.32 with DNS
> 150.5.40.1 and I'm using internal addresses of 192.168.1.0
>
> Below is my iptables script, any idea of what I'm doing wrong?


I'd personally run a copy of BIND with forward-first set, then point
your local boxes to that box.

something like:

acl internal {
  192.168.1.0/24;
};
options {
  allow-query { internal; };
  forwarders {
     150.5.40.1;
  };
  forward-first;
};


Adrian
--
Email: adrian@??? -*- GPG key available on public key servers
Debian GNU/Linux - the maintainable distribution -*- www.debian.org