[lug] firewall question

[Chip Atkinson]

Greetings,

Is there any occasion where a web and name server should be allowed to 
initiate outgoing connections?  I don't believe that there is any, but 
the one thing I don't know about is UDP DNS traffic.  Does the UDP dns 
traffic arise because it is contacted via UDP instead of TCP, or does 
the name server start a UDP connection back?  That doesn't seem quite 
reasonable.

Thanks in advance.

Chip