Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I am using dnsmasq on a CentOS box on an external network. My config file looks as follows:

port=53
bind-interfaces
user=root
group=dnsmasq
pid-file=/var/run/dnsmasq.pid
domain-needed
bogus-priv
no-hosts
dns-forward-max=150 
cache-size=1000
neg-ttl=3600
resolv-file=/etc/resolv.dnsmasq
no-poll
log-facility=/var/log/dnsmasq.log
log-queries

When I set my computer's DNS IP to my VPS, no website resolves. I can see in the log file

share|improve this question

1 Answer 1

Centos by default has the iptables firewall installed and running. The default configuration is quite restrictive. I suspect that you haven't made provision within your firewall configuration to allow access on port 53. To check

sudo /sbin/iptables -L | grep domain 

if you get an output like this

ACCEPT     udp  --  anywhere             anywhere            udp dpt:domain
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:domain

then port 53 is open and your problem lies elsewhere.

If you get a blank output then you will need to add rules to open port 53.

sudo /sbin/iptables -I RH-Firewall-1-INPUT -p udp -m udp --dport 53 -j ACCEPT
sudo /sbin/iptables -I RH-Firewall-1-INPUT -p tcp -m tcp --dport 53 -j ACCEPT

Then save the configuration

sudo /sbin/service iptables save
share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.