Home / server / Questions / 294180
In Process
Brad Morris
Asked: 2011-07-27 04:56:28 +0800 CST

DNS (Bind9) Behind Firewall

  • 772

Im running ubuntu 10.04 and Bind9 behind a firewall. I have forwarded Ports 53 (UDP/TCP) to the local server (192.168.0.4).

The DNS system seems to be hit-and-miss when the firewall is enabled, however when I assign the server as the default DMZ server it works fine.

I do know Bind was never designed to run behind a firewall, however I am a bit weary of running the server open to the wide world all the time (I'm not a security guru, so I'm treading cautiously!)

If anyone could shed light on the situation I'd appreciate it. The server is located at 109.224.135.26 (currently behind a firewall) if anyone wants a play around

Thanks!

firewall ubuntu domain-name-system dmz bind

1 Answers

  1. Bind will use random ports to connect to the querying clients (random output ports), are you sure that they can leave the firewall without problem? Also, some providers block low port incoming connections.

    • 1