Frustration getting DNS properly working

[shacall]

Nice! Thanks for the great link, and your assistance. Have a great weekend.

Gary

[Lazydog]

The stuff in that link is an over kill. Simple and gets the job done;

iptables -A INPUT --dport 53 -state --state NEW -j ACCEPT
iptables -A OUTPUT -state --state ESTABLISHED,RELATED -j ACCEPT

By just using the port and not the protocol all traffic on port 53 TCP or UDP is accepted. Source ports are not required and can be skipped. The second line is just ensuring that the reply traffic is allowed out. The above lines are only for DNS you still would need to configure rules for other traffic.

Do not forget to start with a locked down system and then open only the ports that are required.