DNS Server Spoofing

Any suggestions in stopping the spoofing on a WR21 using the firewall?