EUCA-4206 DNS ports should be open only on CLC