Reply To: Restrict access to computer

[DrmCa]

You don’t even need to allow DNS.
Set up ZS box as a DNS server and forbid port 53 for entire LAN in a firewall.
The LAN machines will use ZS box as a DNS server.

There is a writeup here: https://www.zeroshell.org/opendns/

You can use OpenDNS or your ISP provider’s DNS.