Re: email only access revisited (fwd)

Cassandra Perkins (cassy@loop.com)
Fri, 7 Jun 1996 22:21:18 -0700 (PDT)

On Wed, 5 Jun 1996, Benn Boulton wrote:

>
>
> ---------- Forwarded message ----------
> Date: Wed, 5 Jun 1996 15:56:04 -0500 (EST)
> From: Benn Boulton <benn@srnet.com>
> To: "Dick St.Peters" <stpeters@NetHeaven.com>
> Cc: portmaster-users@srnet.com
> Subject: Re: email only access revisited
>
> > > 1 permit 0.0.0.0/0 206.148.68.2/23 tcp dst eq 25
> > > 2 permit 0.0.0.0/0 206.148.68.2/23 tcp dst eq 110
> > > 3 permit 0.0.0.0/0 206.148.68.2/23 tcp dst eq 53
> > > 4 permit 0.0.0.0/0 206.148.68.2/23 tcp dst eq 80
> >
> > add
> > 5 permit 0.0.0.0/0 206.148.68.2/23 tcp dst eq 113
> > --
> > Dick St.Peters, Gatekeeper, Pearly Gateway, Ballston Spa, NY
>
> ????
> added 5 as above checking mail is still ok (FASSSST) sending mail takes
> forever to contact mail host.
>
> WWW not working now.
>
> Benn
>
>
This might not solve your problem, but shouldn't filter three allow udp
instead of tcp for dns queries.

3 permit 0.0.0.0/0 206.148.68.2/23 udp dst eq 53

I believe tcp is used for zone transfers.

Cassandra Perkins
The LOOP ISC