What do you mean by DNS? This is the stateful flow from my SRX firewall. (I replaced my public IP with 1.1.1.1) Session ID: 48579, Policy name: untrust_TO_LENGINX/80, Timeout: 2, Valid In: 66.118.142.167/43834 --> 1.1.1.1/80;tcp, Conn Tag: 0x0, If: ge-0/0/0.0, Pkts: 1, Bytes: 40, Out: 10.0.20.11/81 --> 66.118.142.167/43834;tcp, Conn Tag: 0x0, If: irb.20, Pkts: 1, Bytes: 40, Sent from my iPad using Tapatalk