BIND server on ASUS AC68U and firewall

[Turgut Kalfaoglu]

Hi. I installed the name server on the AC68U and it starts up fine..
However if I enable the router's firewall from the GUI, the DNS server is no longer reachable.
If I disable it, it answers fine.

I tried entering some rules into the GUI but it refuses entries that contain either 127.0.0.1 or the router's own IP.
So, how can I let DNS requests come to the router and still have the firewall running?

Many thanks, -t

 

[dave14305]

Queries from the WAN? You need an INPUT rule in iptables.

 

[Turgut Kalfaoglu]

Many thanks -- I'll try that

 

[Turgut Kalfaoglu]

Excellent.. I got it to work by adding:

/usr/sbin/iptables -I INPUT -p tcp -m tcp --dport 53 -j ACCEPT
/usr/sbin/iptables -I INPUT -p udp -m udp --dport 53 -j ACCEPT

..into the /opt/etc/init.d/S09named after the start lines..

 

[dave14305]

If you are running Merlin firmware, you should also install the Skynet firewall script to block known malware IP from reaching your open ports.

[Release] Skynet - Router Firewall & Security Enhancements

Just because you CAN run a BIND server on the router doesn’t make it a safe idea on its own.

 

[Turgut Kalfaoglu]

If you are running Merlin firmware, you should also install the Skynet firewall script to block known malware IP from reaching your open ports.
[Release] Skynet - Router Firewall & Security Enhancements
Just because you CAN run a BIND server on the router doesn’t make it a safe idea on its own.

Thanks , I am running stock right now.. I hope to upgrade sometime soon..