<snip> > The port range on the input chain here prevents someone from > portscanning your service (low) ports with a source port of 53. Thanks Luke and Paul! :) I didn't realise named did this, i blocked off the high end ports as I was being somewhat anal! :) Cheers Batesy