VM in DMZ Vlan unable to resolve DNS queries.

[meddyuk76]

Brilliant - thanks for everything and thanks for clarifying! You are correct, I don't want my DMZ to access my LAN or my Private Devices Vlan - I want to do the same with the Guest Wifi Vlan and IoT Devices Vlan......i'll get there in the end.

Would you recommend applying a rule to 'reject' anything with a destination of 'Private RCC Networks'? and place above all other rules?

[patient0]

Would you recommend applying a rule to 'reject' anything with a destination of 'Private RCC Networks'? and place above all other rules?

I don't know wha RCC Networks are, maybe you refer to RFC1918, private and not routable addresses?

But no, since the default are 'quick' rules. The first matched firewall rule is applied and no further rules are evaluated. You want that rule as the last rule in the list.

If you put it first then no other rule you create after it, e.g. matching a private IP (for example allow access for one DMZ server to the LAN net) would be evaluated.