🚀 go-pugleaf

In demon.ip.support.unix Paul Black <paul@canix.co.uk> wrote:
> Peter McDermott <peter@petermc.demon.co.uk> wrote:
>> Is it essential to firewall my dns? It's not a service
>> I would have thought likely to be accessed by outside
>> domains?

> The firewall isn't to protect DNS, it's to prevent access by your
> internal machine/network. The reason I do it is to speed things up
> when I'm not connected to the Internet. If DNS is running all the
> time, some applications pause while a DNS lookup times out. By
> using the following two commands:

Actually, I'd reached the conclusion today that it's
this time out that seems to be causing many of my
problems. Another example that I'm finding, is in
trying to use wwwoffle as a web-cache. If I request
a page directly, it gets fetched without any ado. If
I try to use wwwoffle, I get a message telling me
that it couldnt find an authoritative server for the
host (or something similar.)

Time to look a bit more closely at my dns setup, I
think. Actually, it's probably time I just dumped
this nasty Suse distro, and switched to something
a little nicer. 


> /sbin/ipchains -D input -j REJECT -p udp -d gammon domain
> /sbin/ipchains -I input -j REJECT -p udp -d gammon domain

You put this in ip-up and then remove it in ip-down? Or
does it stay in place the whole time?

Does anyone have an example of a full firewall
set-up for a home network connected to Demon that
I could take a look at?