Puerto 53 abierto pero no accesible

Hola. Perdón por la demora, no he podido realizar la prueba hasta hoy.

Sigue sin funcionar. Una petición de resolución de nombre por UDP en la red interna sigue funcionando:

bnt@deuterium:~$ ping 192.168.0.2
PING 192.168.0.2 (192.168.0.2) 56(84) bytes of data.
64 bytes from 192.168.0.2: icmp_seq=1 ttl=64 time=89.5 ms
64 bytes from 192.168.0.2: icmp_seq=2 ttl=64 time=54.4 ms
^C
--- 192.168.0.2 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1002ms
rtt min/avg/max/mdev = 54.436/71.990/89.545/17.554 ms


bnt@deuterium:~$ dig @192.168.0.2 +notcp fastpace.org A

; <<>> DiG 9.20.0-2ubuntu3-Ubuntu <<>> @192.168.0.2 +notcp fastpace.org A
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11175
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; COOKIE: 573a7a07f921692a01000000676fef139150f16e5a3cc5bd (good)
;; QUESTION SECTION:
;fastpace.org. IN A

;; ANSWER SECTION:
fastpace.org. 604800 IN A 192.168.0.2

;; Query time: 24 msec
;; SERVER: 192.168.0.2#53(192.168.0.2) (UDP)
;; WHEN: Sat Dec 28 13:29:07 CET 2024
;; MSG SIZE rcvd: 85

bnt@deuterium:~$ 

Pero una petición de resolución vía UDP desde fuera de la red sigue fallando:

support@ip-10-90-0-10:~$ ping 2.139.156.78
PING 2.139.156.78 (2.139.156.78) 56(84) bytes of data.
64 bytes from 2.139.156.78: icmp_seq=1 ttl=53 time=48.3 ms
64 bytes from 2.139.156.78: icmp_seq=2 ttl=53 time=50.4 ms
64 bytes from 2.139.156.78: icmp_seq=3 ttl=53 time=49.8 ms
64 bytes from 2.139.156.78: icmp_seq=4 ttl=53 time=47.8 ms
64 bytes from 2.139.156.78: icmp_seq=5 ttl=53 time=50.2 ms
^C
--- 2.139.156.78 ping statistics ---
5 packets transmitted, 5 received, 0% packet loss, time 4006ms
rtt min/avg/max/mdev = 47.846/49.320/50.446/1.037 ms



support@ip-10-90-0-10:~$ dig @2.139.156.78 fastpace.org A
;; communications error to 2.139.156.78#53: timed out
;; communications error to 2.139.156.78#53: timed out
;; communications error to 2.139.156.78#53: timed out

; <<>> DiG 9.18.28-0ubuntu0.20.04.1-Ubuntu <<>> @2.139.156.78 fastpace.org A
; (1 server found)
;; global options: +cmd
;; no servers could be reached

support@ip-10-90-0-10:~$

Las peticiones por tcp siguen funcionando:

support@ip-10-90-0-10:~$ dig @2.139.156.78 +tcp fastpace.org A
; <<>> DiG 9.18.28-0ubuntu0.20.04.1-Ubuntu <<>> @2.139.156.78 +tcp fastpace.org A
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 17320
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; COOKIE: aeeb7af53adbfcde01000000676fefe148bbe3cd891aac15 (good)
;; QUESTION SECTION:
;fastpace.org. IN A

;; ANSWER SECTION:
fastpace.org. 43200 IN A 2.139.156.78

;; Query time: 51 msec
;; SERVER: 2.139.156.78#53(2.139.156.78) (TCP)
;; WHEN: Sat Dec 28 12:32:33 UTC 2024
;; MSG SIZE rcvd: 85

support@ip-10-90-0-10:~$

Sea lo que sea, sigue impidiendo que la petición DNS por UDP, la normal, no llegue a mi servidor.