> Just my 0.02, if it's worth that much considering I cant even > get DNS lookups from my fw working..... You have probably set policy to DROP for the OUTPUT chain. iptables -A OUTPUT -p udp --dport 53 [-d ip_dns] -j ACCEPT Some would say to also do this for the tcp proto, but this should work. Gr, Rob
