› Forums › Network Management › Firewall, Traffic Shaping and Net Balancer › Configure Firewall to Accept DNS Requests for Slave Zones › Re: DNS -> Clients
This is not a ZS firewall issue at all. The DNS itself must be configured to accept clients from the Internet–which is not the default. I added 0.0.0.0/0 to the client list and the external test works as expected now. Excellent!
I will leave this post up in case anyone else makes a similar mistake.
It is worth asking if this is the best practice for providing DNS for example.com, which is intended to be shielded within the Intranet?