I know right, that's exactly why I'm scratching my head with this co'z I know this pretty dang simple rule but it's not working somehow. ughIt should work, any connection to 192.168.4.254:53 should be allowed. If you have rules at the beginning as shown, there's nothing to stop this traffic.