I found an error in the last script called "Example Ruleset #2". The error is in the rule number 020. Wrong: $cmd 020 $skip *tcp* from any to x.x.x.x 53 out via $pif setup keep-state Right: $cmd 020 $skip *udp* from any to x.x.x.x 53 out via $pif setup keep-state Thanks. Regards, Fernando Tonus.