Hi, I am a long time Windows systems administrator and developer who is moving to Linux - so treat me as a newbie. A have just had fibre-optic cable connected at work and setup a multihomed Linux firewall with connections to the Internet, internal LAN (NAT), and a DMZ area. I''m using iptables successfully to firewall at this main junction. In the DMZ area I have two DNS boxes running RedHat 8. I have setup one box as a master and the other as a slave. Both have iptables running locally to limit the ports to ICMP traffic, 53 and 80. If I try the host command to test my DNS configuration it only works when I open up the firewall but gives connection timed out otherwise. I have port 53 open for both udp and tcp, as well as covering INPUT and OUTPUT chains. I noticed in the log file reference to port 953 for named command so tried adding that also. What other ports do I need to open yet remain fairly secure? Also restarting the named service often is troublesome (unlike say iptables). Is that a bind issue. I have tried from both the Services GUI and also from the command line: /sbin/service named restart What is wrong? Thanks, Rob