Home » Mailing list archives » openbsd-misc » 2008 » July » 9

Re: Actual BIND error - Patching OpenBSD 4.3 named ?

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
[view in full thread]
From: Stuart Henderson <stu@...>
To: <misc@...>
Subject: Re: Actual BIND error - Patching OpenBSD 4.3 named ?
Date: Wednesday, July 9, 2008 - 9:17 am

On 2008-07-09, Stuart Henderson  wrote:


thanks to those who pointed out (self) includes 127.0.0.1, so you

don't want to use -> (self), rather use -> (egress).


e.g. "nat on egress proto udp from (self) to any port 53 -> (egress)",


if you have a larger address space available you can use more

of it, e.g. you can use "{192.0.192.0/24} random" on a firewall in

front of name servers.
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
Messages in current thread:
Re: Actual BIND error - Patching OpenBSD 4.3 named ?, Stuart Henderson, (Wed Jul 9, 9:17 am)