Reverse DNS through FW NG

[achilleus]

Hi all...Thanks in advance for any help...

I am running a DNS server on my DMZ...Name resolution seems to be working fine for the outside world, however, reverse DNS does not seem to be getting through...I looked at the DNS servers and they have all of the PTR records, so I have to assume its the firewall...I allowed DNS service through to those machines; is there anything else I would need to allow for reverse DNS to work?

Thanks! AJ
SA
HS

 

[Piloria]

(i may be wrong in this) but DNS and reverse dns both use port 53

to check when trying to do the reverse DNS scan the firewall logs and see if there is a reject (or drop) and what rule and protocol they use

if your firewall has a massive throughput restrict the target machine to the one you are looking at

if all rules are accepting then the problem isnt with the firewall.