Servers with DNS do not respond to ping

[aviateco]

Dear: I have a red scenario all in windows with opnsense firewall, which currently the sub networks only have the rule: for example:
source: LAN_net - destination: any, and that way you can ping all subnets, but I have to make an active directory replica and it is in another subnet and I need dns, then the domain controller that has ads in
ip 192.168.30.2
gateway 192.168.30.1
dns: 192.168.30.2 and secondary dns 192.168.60.2

and the replica:
192.168.60.2
gateway 192.168.60.1
dns: 192.168.60.2 and secondary dns 192.168.30.2

all in host only (I can not remove host only has to be with that) what happens is that I can stop responding, both windows windows 2016 respond standard, but I have no answer, "wait time exhausted for this" request ", in What can I be failing?

Attached network design: