Many of our XP and 2000 machines recently picked up the Welchia and Nachi bugs. The really big problem was the amount of dns requests out. I followed the MS solution to deny port 135, 139, 445, 593, 3333, 4444, and 69 out. My question is how do I prevent all of the DNS queries out? Shane