An especially important firewall policy setting is to block internal users from using the DNS protocol to connect to external DNS servers.

• 一个特别重要的防火墙策略设置是阻塞使用DNS协议去连接到外部DNS服务器的的内部用户。