[ previous ] [ next ] [ threads ]
 
 From:  Uwe Dippel <udippel at uniten dot edu dot my>
 To:  m0n0wall at lists dot m0n0 dot ch
 Subject:  Re: [m0n0wall] Firewall question
 Date:  Thu, 01 Jul 2010 08:40:22 +0800
On 06/30/2010 10:32 PM, Steve Yates wrote:
>
>> pass in quick proto tcp/udp from 172.16.1.0/24 port = 53 to 172.16.1.200 port = 53
>> keep state group 300
>>
> 	The source port for most TCP/IP requests is random so you probably need the source port to be
"any" and the destination port to be port 53.
>
>

Steve, 100% correct!

Thanks for the help,

Uwe