HS> I tried to restrict bind to port 53 [...] Why? Because you are incapable of knocking the proper shape of hole in your firewall? <URL:http://homepages.tesco.net./~J.deBoynePollard/FGA/dns-shaped-firewall-holes.html>