<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt; ">Hello, <br></div><div style="font-family: 'times new roman', 'new york', times, serif; "><div style="font-family: 'times new roman', 'new york', times, serif; "><div id="yiv1911095811"><div><div style="background-color: rgb(255, 255, 255); font-family: 'times new roman', 'new york', times, serif; "><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 12pt; "><br></div><div style="color: rgb(0, 0, 0); font-size: 16px; background-color: transparent; font-style: normal; font-family: 'times new roman', 'new york', times, serif; "> I try to put iptables in the same server that unbound but <span class="yiv1911095811Apple-tab-span" style="white-space:pre;"> </span>I can't do a
local resolv:</div><div style="color: rgb(0, 0, 0); font-size: 16px; background-color: transparent; font-style: normal; font-family: 'times new roman', 'new york', times, serif; "><br></div><div style="background-color: transparent; font-family: 'times new roman', 'new york', times, serif; "><div style="background-color: transparent; " class="yui_3_7_2_14_1354203676587_66">dig terra.es @127.0.0.1</div><div style="background-color: transparent; " class="yui_3_7_2_14_1354203676587_66"><br></div><div style="background-color: transparent; " class="yui_3_7_2_14_1354203676587_66">; <<>> DiG 9.7.3 <<>> terra.es @127.0.0.1</div><div style="background-color: transparent; " class="yui_3_7_2_14_1354203676587_66">;; global options: +cmd</div><div style="background-color: transparent; " class="yui_3_7_2_14_1354203676587_66">;; connection timed out; no servers could be reached</div><div style="color: rgb(0, 0, 0); font-family: 'times new
roman', 'new york', times, serif; font-size: 16px; font-style: normal; "><br></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 16px; font-style: normal; "><br></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 16px; font-style: normal; "><br></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 16px; font-style: normal; ">whit this iptables rules:</div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 16px; font-style: normal; "><br></div><div><div>:INPUT ACCEPT [0:0]</div><div>:FORWARD ACCEPT [0:0]</div><div>:OUTPUT ACCEPT [2271:2106405]</div><div>-A INPUT -s 30.0.0.0/8 -p tcp -j ACCEPT </div><div>-A INPUT -s 30.0.0.0/8 -p udp -j ACCEPT </div><div>-A INPUT -s 30.0.0.0/8 -p icmp -j ACCEPT </div><div>-A INPUT -s
127.0.0.1/32 -p udp -j ACCEPT </div><div>-A INPUT -s 127.0.0.1/32 -p tcp -j ACCEPT </div><div>-A INPUT -p tcp -m state --state RELATED,ESTABLISHED -j ACCEPT </div><div>-A INPUT -p tcp -m tcp --dport 53 -j ACCEPT <br></div><div>-A INPUT -p udp -m udp --dport 53 -j ACCEPT </div><div>-A INPUT -j DROP </div><div>COMMIT</div><div><br></div><div><br></div><div><br></div><div>If I clean the firewall, all works, but why? Which ports use unbound for the queries?</div><div><br></div><div><br></div><div>Thanks,</div></div></div><div style="color: rgb(0, 0, 0); font-size: 16px; background-color: transparent; font-style: normal; font-family: 'times new roman', 'new york', times, serif; "><br></div><div style="color: rgb(0, 0, 0); font-size: 16px; background-color: transparent; font-style: normal; font-family: 'times new roman', 'new york', times, serif; "><br></div><div style="color: rgb(0, 0, 0); font-size: 16px; background-color:
transparent; font-style: normal; font-family: 'times new roman', 'new york', times, serif; "><br></div></div></div></div><meta http-equiv="x-dns-prefetch-control" content="on"><br><br> </div> </div> </div></body></html>