24-12-2006, 10:14 | #38 |
Vodka Martini
Join Date: Aug 2006
Location: Lower Cambourne
Posts: 576
|
Still having problems with this .
Here's my access list: ip access-list extended WAN-IN remark Torrent uses TCP and UDP permit tcp any host 87.127.112.125 eq 55896 permit udp any host 87.127.112.125 eq 55896 remark PES6 permit tcp any host 87.127.112.125 eq 5739 remark Established permit tcp any host 87.127.112.125 established remark DNS permit udp any host 87.127.112.125 eq domain remark NTP permit udp any host 87.127.112.125 eq ntp remark Log Other deny ip any any log Here's how i applied it to the dialer: interface Dialer0 ip access-group WAN-IN in Here's the results from show access-list: Extended IP access list WAN-IN 10 permit tcp any host 87.127.112.125 eq 55896 20 permit udp any host 87.127.112.125 eq 55896 30 permit tcp any host 87.127.112.125 eq 5739 40 permit tcp any host 87.127.112.125 established (653 matches) 50 permit udp any host 87.127.112.125 eq domain 60 permit udp any host 87.127.112.125 eq ntp (9 matches) 70 deny ip any any log (141 matches) And here's the log: I can't browse or ping by name or ip address. The entries show my 2 DNS servers sending on port 53 but they appear to be arriving as random ports, trying 2 then changing again. EDIT Just had a thought, is there a command i need to enter to make the cisco act as a dns server? As when i change my pc's tcp settings to point at the router dns stops working.
__________________
Last edited by CliffyG; 24-12-2006 at 10:30. |