Frank Liu wrote: > Hi all, > If I configure the fw to ONLY allow tcp port 53 to my nameservers, > will it cause a problem for the clients and their resolver nameservers? > I understand udp is more efficient. I just want to do if tcp will work. You need to allow both protocols. - Kevin