2. Create one more rule to allow DNS service on top of it.
2. Create one more rule to allow DNS service on top of it.
In my opinion this step is not necessary for clients that are using internal DNS servers (domain controllers) or UTM IP address in DNS settings. Only DC's should be allowed for DNS resolution.