# $Header: /global/src/etc/cl-manage-scripts/patches/RCS/P-iptables-allow-ext-dns,v 1.2 2010/10/21 05:32:49 pb22 Exp $
# patch for NS suporting IPv4 for global access
# patch-file matches : dport.53.-j
# patch-file distmatches = Fedora.Core.release.[56]|Fedora.release.[78]|CentOS|Red.Hat.Enterprise.Linux
# Process using /usr/bin/cl-patch-file unless matching the above
--- /etc/sysconfig/iptables	2008-03-10 07:59:02.000000000 +0000
+++ /etc/sysconfig/iptables	2008-03-10 07:54:26.000000000 +0000
@@ -18 +18,4 @@
+#2 cl.cam.ac.uk: this is a NS, so allow the traffic. Restrict sorce if a local resolver only
+-A RH-Firewall-1-INPUT -p udp -m udp --dport 53 -j ACCEPT
+-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 53 -j ACCEPT
 -A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
