Quote:
|
Originally Posted by iadom
That is what I thought, I have had two Zen DNS servers in my trusted zone for a long time now, I used the Zen ones when the Ntl DNS was a bit shaky a while ago, but both my BB and dial up connection are, or where set to obtain DNS automatically and I have had no problems for ages, it is only since setting up expert rules for Generic Host for Win 32 that my dial up connection failed. ZA Pro kept blocking connection attempts to 212.23.3.11 which is a Zen Dns server but not the two I had in my trusted zone. I have now set expert rules to allow 212.23.8.1 and 212.23.8.6 and set dial up account to use these and the problem is no more. I did try to add these to "Rules" but connection still failed until I specified them in dial up settings.
Using the link you provided to the letter, it blocked anything other than the specific Dns servers you enter into rules on dial up.
I cannot explain why my BB connection works with "Obtain DNS automatically" and yet the dial up is blocked with the same settings.  |
Hmmm.
Source: mycomputer, 127.0.0.1, [your DNS server IP address(es)], trusted zone;
Destination: mycomputer, 127.0.0.1, [your DNS server IP address(es)], trusted zone;
You could put all the servers, including 127.0.0.1, in the trusted zone - that's what I have done. Then the Firewall expert rule (as oppose to Program expert rule) is just MyComputer --> Trusted and Trusted --> MyComputer. I would expect that to work, but I occasionally have trouble with my NTP client and DNS - connections are blocked. I have to remove and re-add my DNS servers to the trusted zone. No doubt something related to the database.
[edit] All my programs have access to the Trusted Zone - I tend to put servers in that zone and then use Program expert rules to limit connections to particular protocols/ports.
Firewall expert rules take priority over anything else, hence the connection to the Zen DNS server being blocked - the one not in the Trusted zone. I only use Firewall expert rules for limiting log entries.