dns recurses: add firewll

Change-Id: I47de949e10161f8bf468b4bd5d4a3a3dd95b8dcd