BIND update?

[Mike Silbersack]

On Thu, 10 Jul 2008, Tim Clewlow wrote:

> Assuming this is NOT a gateway, ie a single homed DNS.

nat on $ext_if proto udp from any to any port 53 -> ($ext_if)

That's the rule that works for me.  You don't need to worry about tcp 
because tcp is protected by its 32 bit initial sequence number.

If someone wants to go propose this fix on bugtraq, please don't mention 
my name.  I don't want to get dragged into it. :)

-Mike