On 13 Jun 2012, at 00:56, Mark Andrews wrote: > Both firewall configuration are broken. You don't look at source > ports if you are offering a service. Although BIND does drop queries from source port 7 and a couple others... ;-) Ray