
#-----------------------------------------------------------------------
# CHANGES
#-----------------------------------------------------------------------
#
# 2000-10-14  Jean-Sebastien Morisset <jsmoriss@jsm-mv.dyndns.org>
#             Initial module written for v5.0.
#
#-----------------------------------------------------------------------
# MODULE CONFIGURATION
#-----------------------------------------------------------------------
#
#m# 123
#a# accept
#i# cluster
#n# dns
#t# clients
#
#   |--------------------------------------------------------------------|
#d# If you're hosting an internet domain, set the accept variable to 
#d# "any/0". This opens port 53 in UDP and TCP (for zone transfers). If 
#d# you don't manage your own domain/zone, leave this option empty.
#   |--------------------------------------------------------------------|
#
#-----------------------------------------------------------------------
# START OF MODULE CODE
#-----------------------------------------------------------------------

for host in `Option_Value accept $INTOPT dns clients`
do
	echo "Accept $INTOPT $IPADDR DNS <- $host $LOG_MSG"
	ipchains -A $INCHAIN  -j ACCEPT -p udp -s $ANY -d $IPADDR domain $LOG
	ipchains -A $OUTCHAIN -j ACCEPT -p udp -s $IPADDR domain -d $ANY $LOG

	# TCP ports must be opened to support zone transfers, etc.
	ipchains -A $INCHAIN  -j ACCEPT -p tcp      -s $host $UNPRIVPORTS -d $IPADDR domain     $LOG
	ipchains -A $OUTCHAIN -j ACCEPT -p tcp ! -y -s $IPADDR domain     -d $host $UNPRIVPORTS $LOG
done
unset host

