Our network is protected by a firewall but my predecessor put both the primary and secondary DNS servers that resolve our domains to the outside world outside of the firewall protecting our network.
For example, you can monitor all the network traffic on your network using the pktmon filter add -i 192.168.1.0/24 command or monitor DNS traffic using pktmon filter add -t UDP -p 53. Once again, it ...