Cisco Pix 501 Configuration to protect a DNS server

We’ve got a TechSoup user who has configured a Pix 501 to protect a DNS server . The only function which is carried out by the server is DNS, so as much as possible the user is looking to lock the server down, both outgoing and inbound, so that only that function is allowed. Can you check out his configuration? Post your feedback here and let us know if you saw the question in the RSS feed!