Access_list HELP!!!Please

[chadstanphill]

I have a access-list for one of my routers but I am having a problem with DNS I know DNS uses port 53 but I am wondering what else I need to do because when I don't do a gt1023 on the access-list for the DNS The DNS does not resolve. I know its a UDP port this but is there a better range then just 1023 and above.
Thanks

 

[marsd]

Basic one:
access-list 112 permit udp any nameserver wildcardmask eq 53

Or if you are sure this is what you want:
access-list 112 permit udp any gt 1023 nameserver wildcardmask eq 53