-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 At 07:54 PM 4/17/2002, you wrote: >http://www.ISAserver.org > > >What do you think netbios have to do with my problem? >Actualy I took the wrong line from my log. I look more like this: > >2002-04-18 02:53:13 192.168.1.10 192.235.216.135 Udp 1077 53 BLOCKED >65.92.251.69 Well, the other event log entry had UDP 138 as source and destination. UDP 138 is a netbios datagram-- that's why I said that. Now that I see the correct entry, I agree with Tom in that you need to allow create a protocol rule to allow the DNS query. hth AD -----BEGIN PGP SIGNATURE----- Version: PGP 7.1 iQA/AwUBPL4lAYhsmyD15h5gEQLKhACg8ujDXSTBVihlXxzV9595RRXAwpMAoObw JuXxCMunnOIEBWWWQY3+1WVT =wGvH -----END PGP SIGNATURE-----