traindancer  Freshman Member

I'm a knucklehead, I had an error in my policy definitions! Everything works now, sorry for the noise.

Yes, thanks. I tried the DNS service group, but it doesn't block the traffic. The rule has the "starting port" set to 53, while we need the "ending port" to be 53. I tried creating my own service group and while it's possible to enter "53" into the ending port field, leaving the starting port field empty, it doesn't stay…