Having an issue with the router being able to do DNS queries. Here's my config (condensed). Can't seem to get it to work. If I remove the self zone works fine and I just cant seem to figure out what I'm doing wrong so the router can route DNS. I did add an external IP NAME-SERVER.
class-map type inspect match-any All_Protocols
match protocol tcp
match protocol udp
match protocol icmp
class-map type inspect match-any self-to-out
match access-group 111
class-map type inspect match-any out-to-self
match access-group 112
policy-map type inspect self-to-out
class type inspect self-to-out
pass
class class-default
drop log
policy-map type inspect out-to-self
class type inspect out-to-self
pass
class class-default
drop log
policy-map type inspect INSIDE-OUTSIDE
class type inspect All_Protocols
inspect
class class-default
drop log
zone security inside
zone security outside
zone-pair security INSIDE-OUTSIDE source inside destination outside
service-policy type inspect INSIDE-OUTSIDE
zone-pair security out-to-self source outside destination self
service-policy type inspect out-to-self
zone-pair security self-to-out source self destination outside
service-policy type inspect self-to-out
access-list 10 permit 10.10.10.0 0.0.0.255
access-list 111 permit udp any any eq bootps
access-list 111 permit udp any any eq domain
access-list 111 permit udp any any eq 5060
access-list 111 permit tcp any any eq 5060
access-list 112 permit udp any any eq bootpc
access-list 112 permit udp any any eq domain
access-list 112 permit udp any any eq 5060
access-list 112 permit tcp any any eq 5060
