ok i've added a new rule in our ipchains. i add the rejection of udp access. figured we were loading pages and everyone always loads via tcp right. well it looks like now the dns server we reference is getting rejected b/c of this rule. which means our server now can't resolve names. how do i fix that.....we don't want to:

1) leave ourselves open to all udp
2) leave ourself open to everything from the dns server.


is there a way to know which port that we should open up udp to for that dns so that we can resolve the names?

any other ideas? any other help?

.