From owner-FreeBSD-net-jp@jp.freebsd.org  Mon Apr 24 23:46:29 2000
Received: (from daemon@localhost)
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) id XAA02889;
	Mon, 24 Apr 2000 23:46:29 +0900 (JST)
	(envelope-from owner-FreeBSD-net-jp@jp.FreeBSD.org)
Received: from Demone.Azzurri.ORG (odn-d159.cablenet.ne.jp [210.254.29.159])
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) with ESMTP id XAA02884
	for <FreeBSD-net-jp@jp.freebsd.org>; Mon, 24 Apr 2000 23:46:28 +0900 (JST)
	(envelope-from tdoi@Azzurri.ORG)
Received: from localhost (Demone.Azzurri.ORG [210.254.29.159])
	by Demone.Azzurri.ORG (8.9.3/3.7Wpl2:TDoi_4.4BSD) with ESMTP id XAA02158
	for <FreeBSD-net-jp@jp.freebsd.org>; Mon, 24 Apr 2000 23:45:56 +0900 (JST)
To: FreeBSD-net-jp@jp.freebsd.org
From: Toshiaki Doi <tdoi@Azzurri.ORG>
In-Reply-To: <200004241046.CCD55385.BZBBTVNZ@Alexon.CO.JP>
References: <20000423033234J.tdoi@Azzurri.ORG>
	<20000423211717Z.tdoi@Azzurri.ORG>
	<200004241046.CCD55385.BZBBTVNZ@Alexon.CO.JP>
X-Mailer: Mew version 1.94.1 on Emacs 20.6 / Mule 4.0 (HANANOEN)
Mime-Version: 1.0
Content-Type: Text/Plain; charset=iso-2022-jp
Content-Transfer-Encoding: 7bit
Message-Id: <20000424234556A.tdoi@Azzurri.ORG>
Date: Mon, 24 Apr 2000 23:45:56 +0900
X-Dispatcher: imput version 20000228(IM140)
Lines: 42
Reply-To: FreeBSD-net-jp@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+000315
X-Sequence: FreeBSD-net-jp 2481
Subject: [FreeBSD-net-jp 2481] Re: Err/TO errors being (named)
Errors-To: owner-FreeBSD-net-jp@jp.freebsd.org
Sender: owner-FreeBSD-net-jp@jp.freebsd.org
X-Originator: tdoi@Azzurri.ORG


$BEZ0f$G$9!#(B

> >   01900 allow udp from any 53 to any
> >   02000 allow udp from any to any 53
> > $B$KJQ99$7$?$i!"%a%C%;!<%8$O;_$^$j$^$7$?!#(B
> 
> $B$3$l!"$J$s$+62$$$G$9$h$M!#(B(^.^;

$B$d$O$j!%!%!%(B $B;d$b$=$&;W$$$^$7$?$,!"2r7h:v$,8+$D$+$i$J$+$C$?$b$N$G(B(^^;
 01900 allow udp from any 53 to any
 02000 allow udp from 210.254.29.159 to any 53
$B$G$b(B
 01900 allow udp from any 53 to 210.254.29.159
 02000 allow udp from any to any 53
$B$G$b!"%@%a$G$7$?!#(B
UNIX USER 2000$BG/(B4$B7n9f$G(B
 ipfw add pass udp from any to a.b.c.d 53
$B$H$d$C$F$$$k$N$G!"$3$l$r;n$7$F8+$h$&$H;W$$$^$9!#(B

> $B$3$N<j$O(B ipfw $B$G(B deny $B$K$7$F$$$kE[A4It$K!"(B log $B$C$FDI2C$7$F$_$k$H(B
> $B5H$H=P$k$+$bCN$l$^$;$s!#(B

$B$3$l$O!"$d$C$F8+$^$7$?!#$?$@!"$3$N%5!<%P$O!"(BCATV$B$K$D$J$,$C$F(B
$B$$$^$7$F!"2?$d$i%W%i%$%Y!<%H%"%I%l%9$N%V%m!<%I%-%c%9%H$J$I(B
$BJQ$J%Q%1%C%H$,B?$/!"ESCf$G:C@^$7$F$7$^$$$^$7$?!#(B
#tcpdump$B$G%(%i!<$,=P$?;~$N(Bport 53$B$N(Budp$B%Q%1%C%H$r!"=&$C$F$^$9$N$G!"(B
#$B$3$3$+$i2r@O$7$F8+$h$&$H;W$$$^$9!#(B

> $B$3$l$H$OJL$K(B named.conf $B$K(B query-source address $B$8$c$J$/$F(B
> allow-transfer $B$r;H$&$N$O$I$&$+$J$!!#(B
> 
> options {
>         directory "/var/namedb";
>         allow-transfer { slave-named-IPaddres ;};
> };

$B$=$&$G$9$M!#$3$l$O!"F~$l$F$*$3$&$H;W$$$^$9!#(B
$BM-Fq$&8f:B$$$^$7$?(Bm(_ _)m
---
#! T o s h i a k i    D o i   <tdoi@Azzurri.ORG>
#  PGP Key fingerprint = 8AEF 53D9 651E D3ED  8E62 4F31 4A86 A0A4
