ICS and firewall DNS rules (FYI)

[PC Pete]

I've just found out that Tall Emu Online Armor will by default block UDP
port 53 on an ICS gateway machine.

This means that any users of OA MUST create an outgoing UDP port 53
permit rule in order to correctly get DNS responses.

And because of the way the service pack updates work, OA may disable
that rule when it sees svchost.exe changed during the SP update. In that
case, re-creating the rule will fix that problem.

I hope this helps someone else out there!

 

[James Egan]

I've just found out that Tall Emu Online Armor will by default block UDP
port 53 on an ICS gateway machine.

Was this the issue behind the DNS problems you were having a couple of
weeks ago which no one could help out with?

If so, you mentioned in that post that you had tried using the windows
firewall with the same result as Online Armor. I'd like to understand
what happened if you can spare the time.



Jim.