Re: [CentOS] Bind Firewall Rules

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

John,

Maybe I'm just missing something... I have

-A RH-Firewall-1-INPUT -p tcp -m tcp -m state --dport 53 --state NEW -j ACCEPT -A RH-Firewall-1-INPUT -p udp -m udp -m state --dport 53 --state NEW -j ACCEPT -A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

I'm not very good with firewall rules, but I assume these are the three that are important?

I find shorewall is a fantastic front-end to iptables. Options such as "shorewall safe-restart" - (which prevents the new rules being permanently applied by asking you for confirmation after they've been applied. If you don't respond then it reverts back to the old ruleset).

It's saved me a lot of hassle :)

Regards,

Andy