Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

DNS reply is blocked by the outbound Access Control List (ACL) with clients outside

Core issue

The issue is documented in Cisco bug ID CSCsd35775.

The problem occurs after an upgrade from PIX Firewall software 6.3.4 to 6.3.5(105). The DNS replies are blocked by the outbound ACL for Domain Name System (DNS) queries initiated from outside to inside. The ACL does not have explicit access control entries to allow DNS replies from theDNS server back to the client.


For a workaround, explicitly permit the traffic from source UDP port 53 and the address of the inside DNS server in the ACL.

As an alternative, upgrade the PIX code to version 6.3(5.109) or the latest version. Refer to Software Download: Cisco PIX Security Appliance Software.

Product Family

Firewall - PIX 500 series

PIX Software Version

PIX version 6.x

Can You Ping...

Client can ping by IP, but not by name