What filter exception do we need on a BM 3.8 server which will run DNS for
our local network?

Also, do we just the DNS proxy for all Internet DNS? I do not want to make
a whole that someone could get out on port 53.

L