Access-filter for DNS???

[joeka77]

Hallo,

im trying to open a flter for DNS. I defined a access-group 101 and bound it to the serial line with "ip group 101 in".
I also defined "access-list 101 permit tcp any any eq

http://www".

Consequently, all traffic besides Port 80 is blocked. Ok.

I defined "access-list 101 permit tcp any any any 53"
-> dns didnt work
I defined "access-list 101 permit tcp any any established" and
"access-list 101 permit udp any any eq 53"
-> dns still didnt work

Whats wrong? Have i to completely open udp?
How can i permit DNS?? (There are no other filter but "101".

Thanx for Info

 

[dnels]

Have you done a 'sho access-list 101' to see if there are any packets being permitted or denied?