> Hmm, are the clients on your wireless interface using m0n0wall's
> DNS forwarder by chance?
Yes, all my clients get the DNS forwarder by default (and most of them
wouldn't know how to change it to something else :->).
Glad you understood why! Btw, this fixed my problem as I described it in
the "Outbound DNS queries showing up as BLOCKED in logs?" thread.
Thanks again for such a great project!