YES
If not Firewall, must be DNS