How to open bind in iptables?

[freesqrt]

Hey,

Recently I have a problem with my bind 8. when the iptables in flashed, the clients can resolve addresses with no problem but when iptables is up, I get "request time out"!!!
I wonder why in the second state, client get "server: unknown" message!!

How can I open the correspondent ports to serve DNS clients?

Regards,

[falko]

You must open port 53 (TCP and UDP!).

[freesqrt]

Thank you Falko,

I open these and now bind resolves its own zones addresses pretty well.
But as before I have a lot of logs like this in /var/log/message:

too many timeouts resolving 'sinfo.net/MX' (in 'sinfo.net'?): disabling EDNS
too many timeouts resolving 'mx4.nmci.usmc.mil/AAAA' (in 'usmc.mil'?): disabling EDNS

what you think about the problem?

Also other domains like google.com can't be resolved and "query refused" returned!!!

Regards,

[alleks]

First of all, could you try to update to bind9? I'm just saying, you're using a old and insecure version of bind, try to update.