Basic firewall stops forward dns zone working externally

[peterjm]

I cant connect to my web site externally (unless i put in ns1. or ns2. before the domain or enter the ip's themselves) when "Enable a basic firewall on this interface" is checked in NAT/Basic Firewall settings for my External Interfaces. If i turn off the firewall then it can see the forward lookup zone and dns entries on my server fine. Anyone know what the firewall might be blocking? Id like to be able to make an exception or add a service and get the firewall enabled again.

Thanks!

 

[schtek]

hope this helps u ???

http://www.wown.com/articles_tutorials/NAT_Windows_2003_Setup_Configuration.html

It's the same each time with progress. First they ignore you, then they say you're mad, then dangerous, then there's a pause and then you can't find anyone who disagrees with you.

 

[peterjm]

Ive opened up FTP, SMTP, Remote Desktop, HTTP, and added 5800 and 5900 on both my external interfaces. Im jut wondering why i have to disable my basic firewall on the interfaces in order for my forward lookup zone entries in dns to be visable.

 

[pherr]

tcp port 53
udp port 53

ph

 

[peterjm]

Thats what I needed. Thanks Alot!