Dear my friends.... I am using SuSE Linux 8.1 as an internet gateway with squid, SuSEfirewall, BIND8 and ip-masquerading. It works properly but not always because some times, my LAN user can not surfing in internet. The error message on their browser in under below: " The requested URL could not be retrieved While trying to retrieve the URL: http://www.yahoo.com/ The following error was encountered: Unable to determine IP address from host name for www.yahoo.com The dnsserver returned: No DNS records This means that: The cache was not able to resolve the hostname presented in the URL. Check if the address is correct. Your cache administrator is webmaster. " Here is what in the "/var/log/messages": " proxy:/var/log # cat /var/log/messages|grep DPT=80|grep -v DST=192.168.23.10 Feb 27 16:14:53 proxy kernel: SuSE-FW-ACCEPT IN=ippp0 OUT= MAC= SRC=145.254.192.34 DST=145.254.88.223 LEN=48 TOS=0x08 PREC=0x00 TTL=119 ID=14754 DF PROTO=TCP SPT=4215 DPT=80 WINDOW=16384 RES=0x00 SYN URGP=0 OPT (020405B401010402) Feb 27 16:14:54 proxy kernel: SuSE-FW-ACCEPT IN=ippp0 OUT= MAC= SRC=145.254.192.34 DST=145.254.88.223 LEN=48 TOS=0x08 PREC=0x00 TTL=119 ID=14825 DF PROTO=TCP SPT=4215 DPT=80 WINDOW=16384 RES=0x00 SYN URGP=0 OPT (020405B401010402) Feb 27 16:14:55 proxy kernel: SuSE-FW-ACCEPT IN=ippp0 OUT= MAC= SRC=145.254.192.34 DST=145.254.88.223 LEN=48 TOS=0x08 PREC=0x00 TTL=119 ID=14890 DF PROTO=TCP SPT=4215 DPT=80 WINDOW=16384 RES=0x00 SYN URGP=0 OPT (020405B401010402) proxy:/var/log # " The LAN user can go to the internet back only if I restart my SuSEfirewall2: " proxy:/var/log # SuSEfirewall2 stop Removing filter rules ... SuSEfirewall2: clearing rules now ... done proxy:/var/log # SuSEfirewall2 start Warning: FW_SERVICE_DNS defined, but no DNS server found running! proxy:/var/log # " I have openned port number 53, 25, 110, 67, 3128, 80, 8080. Please tell me why........ Pleasee......... __________________________________________________ Do you Yahoo!? Yahoo! Tax Center - forms, calculators, tips, more http://taxes.yahoo.com/