I have installed a linux 9 router/firewall and have issues with outside DNS queries making it in. here are my IPTABLE rules, can anyone make some suggestions?

ETH1 is my outside facing Interface, ETH0 is my inside facing interface.

Accept If input interface is not eth1
Accept If protocol is TCP and TCP flags ACK (of ACK) are set
Accept If protocol is UDP and input interface is eth1 and destination port is 1024:65535 and source port is 53
Accept If state of connection is ESTABLISHED
Accept If state of connection is RELATED
Accept If protocol is TCP and destination is 216.58.39.241 and input interface is eth1 and destination port is 110
Accept If protocol is TCP and destination is 216.58.39.241 and input interface is eth1 and destination port is 25
Accept If protocol is TCP and input interface is eth1 and source and destination ports are 6346
Accept If protocol is ICMP and ICMP type is source-quench
Accept If protocol is ICMP and ICMP type is time-exceeded
Accept If protocol is ICMP and ICMP type is parameter-problem
Accept If protocol is TCP and destination port is ssh
Accept If protocol is TCP and destination port is auth

flush ur rules first.
choose ur policies like which port nos can b allowed thru eth1
u hv not mentioned sepearate rule for nic's
specify a rule with corresponding eth device

sriram.s, it can be difficult for people who do not speak English as a first language to understand this kind of reply.
Simple rules of the UNIX.COM forums:
See rule #9

You will probably need to explicity allow the DNS requests trough by allowing access on port 111.

thanx for the input reborg!
but port 111 serves rpc service..?
could u pls explain in detail.

You will have to bear with me because it has been quite some time since I have had any need to manipulate iptables on any of my servers, but I got a bit confused between a phonecall I was on when I replied to this and your question.

What I meant to say is that you would need to allow access for UDP and TCP on port 53. Most lookups happen by UDP but some do not, and zone transfers happen exclisively by TCP.

Accept If protocol is UDP and destination is 216.58.24.33 and destination port is 53 and source port is 1024:65535
Accept If protocol is UDP and destination port is 1024:65535 and source port is 53

Oh yeah I also changed IP to 216.58.24

ok any way issue has been sorted out..!
keep posting....!