> It fails....times out. All the time. I'm assuming my rules are blocking > this. I'm just not sure how.....how the dig utility differs from > nslookup. It is late, i have to go home and do not have the time to check it, but maybe your rules are not quite compliant with the DNS protocol. DNS uses both TCP and UDP for name resolution. Most generally UDP is used, but TCP MAY be used. Please tcpdump the traffic generated by those tools and check rules versus both of these protocols.
Regards, Maciej Soltysiak
