> All it needs is port 53 TCP and UDP open (outbound), > depending on what > firewall product you use, depends on how. A bit of Google with what > ports on what product will yield what you should need.
One thing to note... if your firewall is proxying for you, make sure it doesn't think it's authoritative for the 127.0.0.X stuff. Ours did and when it got a reply back from the SURBL servers with a result of 127.0.0.10, for example, the firewall actually returned NXDOMAIN because it saw that the results were in a domain it was authoritative for, and discarded them as invalid. johnS
