DNS proxy issue

The default firewall is dropping any new connection from WAN (default WAN is ether1).