dns recursors: add ferm rules

Change-Id: Ib0cb968f8987ad2cfb2976c7478abfe75ecc2142
Merge "dns recursors: add ferm rules" into production