what is the minimum filter needed for DNS look-ups? per tid 10018348 I
need an outgoing exception to allow UPD port 53. Do I need to use the
dns/udp (Domain Name Service) or dns/udp-st (Stateful DNS over UDP)?
I assume it is safe to lose the dns/tcp rule as well or is that needed
for any COMMON web stuff?