Use udp for the DNS security group

Hi Dr Nic,

This commit fixes BOSH VMs cannot resolve host names with the built in DNS server.