Using Ethereal, I discovered that my DC is receiving and sending DNS messages to unauthorized hosts that somehow get past my PIX firewall. The source port is 53 and the destination port is 1159. Is there a way to prevent outside hosts from making queries and receiving answers from my internal DNS server?