dns query not allowed because of ACL