"Eugene van Zyl" <evz@streetcar.com> wrote: > Hi, > > What's wrong with the following ruleset that I can't do any DNS lookups from the firewallhost ? --snip > # output rules > $IPCHAINS -A output -s $localnet -d $Any -j ACCEPT You need output rules that allow dns queries for the firewallhost. Martin -- martin.peikert@innominate.com dipl.-math. innominate AG system engineer the linux architects tel: +49-30-308806-0 fax: -77 http://www.innominate.com