diff --git a/FAQ b/FAQ
index bece16c821..f653312867 100644
--- a/FAQ
+++ b/FAQ
@@ -208,3 +208,10 @@ the server or by dynamic update, but not both.  If you have enabled
 dynamic update for a zone using the "allow-update" option, you are not
 supposed to edit the zone file by hand, and the server will not
 attempt to reload it.
+
+
+Q: I can query the nameserver from the nameserver but not from other
+machines.  Why?
+
+A: This is usually the result of the firewall configuration stopping
+the queries and / or the replies.