Skip to content

Instantly share code, notes, and snippets.

@goozbach
Created June 29, 2011 19:24
Show Gist options
  • Save goozbach/1054683 to your computer and use it in GitHub Desktop.
Save goozbach/1054683 to your computer and use it in GitHub Desktop.
Iptables and Bind issue
Chain INPUT (policy DROP 5 packets, 277 bytes)
pkts bytes target prot opt in out source destination
79 8086 ACCEPT all -- lo any anywhere anywhere
464 92474 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED
0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpt:ssh state NEW
0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpt:domain
0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpt:http
0 0 ACCEPT icmp -- any any anywhere anywhere icmp echo-request state NEW,RELATED,ESTABLISHED
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT 537 packets, 108K bytes)
pkts bytes target prot opt in out source destination
tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
15:22:18.621296 IP (tos 0x0, ttl 53, id 65317, offset 0, flags [none], proto: UDP (17), length: 63) XX.XXX.XXX.XX.45581 > YY.YYY.YYY.YY.53: [udp sum ok] 29340+ A? www.example.com. (35)
15:22:18.621699 IP (tos 0x0, ttl 64, id 25359, offset 0, flags [none], proto: UDP (17), length: 108) YY.YYY.YYY.YY.53 > XX.XXX.XXX.XX.45581: 29340*- q: A? www.example.com. 1/1/0 www.example.com. A ZZ.ZZZ.ZZZ.ZZ ns: example.com. (80)
tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
15:17:34.824244 IP (tos 0x0, ttl 53, id 65314, offset 0, flags [none], proto: UDP (17), length: 63) XX.XXX.XXX.XX.45579 > YY.YYY.YYY.YY.53: [udp sum ok] 15054+ A? www.example.com. (35)
15:17:39.825517 IP (tos 0x0, ttl 53, id 65315, offset 0, flags [none], proto: UDP (17), length: 63) XX.XXX.XXX.XX.45579 > YY.YYY.YYY.YY.53: [udp sum ok] 15054+ A? www.example.com. (35)
15:17:44.827520 IP (tos 0x0, ttl 53, id 65316, offset 0, flags [none], proto: UDP (17), length: 63) XX.XXX.XXX.XX.45579 > YY.YYY.YYY.YY.53: [udp sum ok] 15054+ A? www.example.com. (35)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment