Hi: Well, you could use the hosts.allow and hosts.deny files to control access to your DNS. but I'm curious why you'd want outside people to be able to use your DNS server but not the internal LAN. Not that there's not a good reason for this, it's just that I can't think of one. Geoff.