That's true, but I guess I would have to only allow 53 to our specific dns IP address. I will give that a shot, that was the direction I was leaning anyway, I just wanted to know if there was a better method. Thanks for your help.

dAggressor