Named and firewalld

Ask Fedora
2

I think that you should allow DNS traffic in the firewall, on the zone of the internal interface.
Something like that:

  • Get the active zones:
    firewall-cmd --get-active-zones
  • Allow DNS quesies on the zone called internal.
    firewall-cmd --zone=internal --add-service=dns
  • Test if dns queries are now working.
  • If it is ok, let’s make the rule permanent upon reboots.
    firewall-cmd --runtime-to-permanent