Allow DNS from VPN subnet