bind 9.2.2配置请教

jxgzoyke

-A INPUT -p tcp -m tcp --dport 53 -j ACCEPT
-A INPUT -p udp -m udp --dport 53 -j ACCEPT

把上面两条命令换成：
-A RH-Firewall-1-INPUT  -p tcp -m tcp --dport 53 -j ACCEPT
-A RH-Firewall-1-INPUT  -p udp -m udp --dport 53 -j ACCEPT

qiaofengzi

改成这样了，还是不行
# Generated by iptables-save v1.2.8 on Thu Mar 31 14:40:26 2005
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [271:39029]
:RH-Firewall-1-INPUT - [0:0]
-A INPUT -j RH-Firewall-1-INPUT
-A FORWARD -j RH-Firewall-1-INPUT
-A RH-Firewall-1-INPUT -i lo -j ACCEPT
-A RH-Firewall-1-INPUT -p icmp -m icmp any -j ACCEPT
-A RH-Firewall-1-INPUT -p esp -j ACCEPT
-A RH-Firewall-1-INPUT -p ah -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 53 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m udp --dport 53 -j ACCEPT
COMMIT
# Completed on Thu Mar 31 14:40:26 2005

jxgzoyke

*filter
:INPUT DROP [15:1839]
:FORWARD ACCEPT [150:19419]
:OUTPUT ACCEPT [41:3509]
-A INPUT -i lo -j ACCEPT
-A INPUT -s 192.168.1.0/255.255.255.0 -p udp -m udp --dport 631 -j ACCEPT
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p tcp -m tcp --dport 21:23 -j ACCEPT
-A INPUT -p tcp -m multiport --dports 137,139,445,53 -jACCEPT
-A INPUT -p udp -m multiport --dports 53,139,137,445 -j ACCEPT
COMMIT
你把Iptables的脚本改成上面的样子吧，可能总是是出在了RH-Firewall-1-INPUT中，前面我也遇到过这样的情况，所以我就把这个链删掉了

qiaofengzi

按照仁兄的方法，终于搞定了，不甚感激！