diff --git a/pronto_deployment_guide/troubleshooting.rst b/pronto_deployment_guide/troubleshooting.rst
index e9cd463..192226c 100644
--- a/pronto_deployment_guide/troubleshooting.rst
+++ b/pronto_deployment_guide/troubleshooting.rst
@@ -5,8 +5,12 @@
 Troubleshooting
 ===============
 
+
+Firewalls and other host network issues
+---------------------------------------
+
 Unable to access a system
--------------------------
+"""""""""""""""""""""""""
 
 If it's a system behind another system (ex: the compute nodes behind a
 management server) and you're trying to interactively login to it, make sure
@@ -27,6 +31,25 @@
   ...
   onfadmin@node2:~$
 
+Root/Public DNS port is blocked
+"""""""""""""""""""""""""""""""
+
+In some cases access to the public DNS root and other servers is blocked, which
+prevents DNS lookups from working within the pod.
+
+To resolve this, forwarding addresses on the local network can be provided in
+the Ansible YAML ``host_vars`` file, using the ``unbound_forward_zones`` list
+to configure the Unbound recursive nameserver. An example::
+
+  unbound_forward_zones:
+  - name: "."
+    servers:
+      - "8.8.8.8"
+      - "8.8.4.4"
+
+
+The items in the ``servers`` list would be the locally accessible nameservers.
+
 Problems with OS installation
 -----------------------------