Add allow VMs DNS out rule