Updated DNS rules to allow TCP