May 13, 2011
APF bug cause DNS problem
Posted by: admin : Category: Firewall
If you have problem with domains resolving, check first message log. If you got this error:
error sending response: host unreachable
Your APF have bug. APF blocks them because it only allows outgoing connections from port 53 (DNS) to ethereal ports (1024-65535), i.e. not < 1024. Since the destination port is lower than 1024, it’s dropped.
You can fix this by editing /etc/apf/firewall and changing the lines that contain –sport 53 –dport 1023:65535 to –sport 53 –dport 1:65535, then reload APF.
Popularity: 4% [?]
Comments Off : Add Comment
