Client can't use my dns server

[wirasto]

INTERNET
|
|
|
Gateway ____________ ( Client 192.168.22.0/24)
|
|
|
( DNS 192.168.0.1)


I have set dns forwarders on bind configuration

forwarders {
202.134.1.10;
};


Client can "ping" to dns server. But client can't ping google.com when use 192.168.0.1 as name server.

Sorry, about my poor english

[falko]

Did you open and forward port 53 (TCP and UDP)?

[wirasto]

I'm not implement any rule except nat for MASQUERADE.
What must I do on my gateway???

[falko]

Open port 53 (TCP and UDP) in the router's firewall and forward both ports to your DNS server.

[wirasto]

I'm default forward for everything on my gw firewall and on my dns server. But still not work


iptables -P FORWARD ACCEPT

[falko]

Do you have a static or a dynamic IP? IF you have a dynamic IP, it might have changed in the meantime so that your client uses a wrong IP (besides, it is a bad idea to run a nameserver on a dynamic IP).

[wirasto]

I'm use static ip

[falko]

Does

dig @1.2.3.4 yourdomain.com

work (replace 1.2.3.4 with your public static IP)?

[wirasto]

It work's now. I just put this options

allow-recursion { any; };
allow-recursion-on { any; };

Thank's for all reply