Use udp for the DNS security group