[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Configuring Diald on gateway
- To: "zoqix" <http://www.yahoo.com/~zoqix>
- Subject: Re: Configuring Diald on gateway
- From: http://dummy.us.eu.org/robert (robert)
- Date: Wed Nov  8 09:41:18 EST 2000
- In-Reply-To: <008101c04914$81461040$6688a8c0@krdl.org.sg>
- Keywords: http://www.yahoo.com/~zoqix
 > From: "zoqix" <http://www.yahoo.com/~zoqix>
 > Date: Wed, 8 Nov 2000 07:43:15 +0800
 >
 > > Try doing "tcpdump eth0 -s 8192 -w - udp port 53 | strings" while you
 > > do the connect.  You should be able to see the address it's trying to look
 > > up.
 > 
 > It's trying to look up my ISP's DNS, which is 192.122.134.35.
 > 
 > > Do you have any forwards in your named.conf?
 > 
 > Yes, I have forwards in my named.conf to forward to my ISP's DNS.
Are you using TCP wrappers?  They're probably doing a reverse-lookup.
Are all your local hosts resolved by your named?
 > > Also, how is routing set up?  (Do "route -n".)
 > >
 > 
 > 192.168.5.1    0.0.0.0    255.255.255.255    UH    0    0    0    eth0
 > 192.168.5.0    0.0.0.0    255.255.255.0        U       0    0    0    eth0
 > 127.0.0.0        0.0.0.0    255.0.0                    U        0    0    0
 > lo
That's fine.
 > 
 > > Also, where did you get your IP masquerading rules from?  I assume you are
 > > using ipchains.
 > 
 > Yes, I'm using ipchains.
 > 
 > Using ipchains -L, I get
 > 
 > Chain forward (policy DENY):
 > MASQ    all    ------    192.168.5.0/24    anywhere    n/a
That's pretty minimal, but it should work.
 > >  > I think it's because it trys to update my local dns with external ones.
 > >
 > > Unless you have forwarding set up, I doubt it.
 > 
 > Yes, I have forwarding set up in the named.conf.
 > 
 > > What does your /etc/host.conf look like?
 > 
 > This is my server's host.conf.
 > 
 > 127.0.0.1    pc1    localhost.localdomain    localhost
That's funny.  My /etc/host.conf looks like:
order hosts,bind
multi on
 > >  > Do you know any way to set the refresh mode of this off? This may not
 > solve
 > >  > the whole problem of my diald. But it solve at least one.
 >