Fix DNS lookup including extra IPs

Currently, specifying a rule with a FQDN does a DNS lookup which includes *all* `A` records returned, including that of e.g. the DNS server itself. This leads to more ports being opened than expected.

This change limits results to the "Answer" section, which is what was probably intended.