Any ideas why the following rules breaks DNS respo...
# welcome
u
Any ideas why the following rules breaks DNS response from external hosts?
iptables -A INPUT -m comment -m conntrack --ctstate ESTABLISHED,RELATED,UNTRACKED -j ACCEPT --comment "accept established,related,untracked"
iptables -A INPUT -m comment -p tcp -m tcp --dport 22 -j ACCEPT --comment "Accept SSH port"
iptables -A INPUT -m comment -m conntrack --ctstate INVALID -j DROP --comment "drop invalid"
iptables -A INPUT -m comment -p icmp -j ACCEPT --comment "accept ICMP after RAW"
iptables -P INPUT DROP
Both Forward and Output have accept policy as default Also tried the following
iptables -A INPUT -m comment -p udp --sport 53 -j ACCEPT --comment "Accept DNS port UDP"
iptables -A INPUT -m comment -p tcp --sport 53 -j ACCEPT --comment "Accept DNS port TCP"