DNS queries being blocked

[chadreitsma]

Hey guys,
Is there a way to open DNS queries (port 53) globally, while still using CC_ALLOW_FILTER = US,CA for the rest of the ports?

We have some customers who's mail is getting blocked because servers outside of US/CA can't query the DNS to get the MX entries.

[mbrando]

Try this in the allow rules.

tcp|in|d=53|s=0.0.0.0
tcp|out|d=53|s=0.0.0.0

[chadreitsma]

Thanks mbrando!

We ended up switching the user's DNS back to their domain registrar, so they can manage it, but I'll give this a shot!