Stec John wrote: > Hi Chuck, are you suggesting to add these dns rules on top of the existing > rules? Yes. > Can I use "allow" instead of "pass"? Yes, they mean the same thing: allow Allow packets that match rule. The search terminates. Aliases are pass, permit and accept. -- -Chuck