So by default all Cisco PIX / ASA configs have something along these lines...policy-map type inspect dns migrated_dns_map_1parametersmessage-length maximum 512policy-map global_policyclass inspection_defaultinspect dns migrated_dns_map_1 <-- DNS insp...