Mikrotik DNS not working

I have a CCR1009-7G-1C-1S+ with firmware 6.42.6

I have a working internet connection when the client have a fixed IP and DNS settings. When the DHCP server in the router serves IP addresses and a public DNS address like 8.8.8.8 is it aso working.
When i try to use the internal DNS server it is not working. Set on the client by fixed settings and DHCP.
I have set the “allow remote requests” tick box. See the other settings in the pcture.
I have also tryed some firewall settings without luck
What do i miss???

dns.png

 0    ;;; accept established,related, untracked
      chain=input action=accept connection-state=established,related,untracked 
      log=no log-prefix="" 

 1    chain=input action=accept in-interface-list=LAN log=no log-prefix="" 

 2    ;;; drop invalid
      chain=input action=drop connection-state=invalid log=no log-prefix="" 

 3    ;;; accept ICMP (ping) from vlan200
      chain=input action=accept protocol=icmp src-address=192.168.200.0/24 
      log=no log-prefix="" 

 4    ;;; accept from LAN
      chain=input action=accept in-interface-list=LAN log=no log-prefix="" 

 5    ;;; drop when NOT from LAN
      chain=input action=drop in-interface-list=!LAN log=no log-prefix="" 

 6   ;;; accept hairpin nat
      chain=forward action=accept src-address=192.168.200.0/24 
      dst-address=192.168.200.0/24 log=no log-prefix="" 

 7    ;;; accept established,related
      chain=forward action=accept connection-state=established,related log=no 
      log-prefix="" 

 8    ;;; drop invalid
      chain=forward action=drop connection-state=invalid log=no log-prefix="" 

9    ;;; drop all from WAN not DSTNATed
      chain=forward action=drop connection-state=new 
      connection-nat-state=!dstnat in-interface-list=WAN log=no log-prefix=""

Note: If allow-remote-requests is used make sure that you limit access to your server over TCP and UDP protocol.

To the outside.

Note: If allow-remote-requests is used make sure that you limit access to your server over TCP and UDP protocol.

To the outside.

Thanks for the warning; To my knolage this ia aleady taken care by the fire wall. GRC shieldup is showing port 53 as closed.

Problem is solved

After more testing i found that the firewall was blocking the DNS request from the network. I have added a firewall rule to make it possible