1. Block incoming port 53 udp and tcp requests at the router or firewall. 2. Use secure-zone TXT records. 3. Use whatever other method is available for your server. We could help, but you didn't tell us what it was. Michael Raymond Ip wrote: > > How do I set my dns cannot query by external host ? > > Best Regards > > Raymond Ip