how to allow all applications outbound UDP 53 (DNS) access?

I have added a network rule above “block all” that would allow all outbound UDP 53 (dns) access from my my source ip. but i still get nagged by the application control about what to do for each app that wants an outbound udp 53 connection.

is there a way to specify allow “any” application outbound on udp 53 in the application control rules? perhaps i would still like to log it, but i dont want to config this system, and leave it up to the end users to get nagged about each app that i missed just to resolve hostnames/ip’s.

plus this would allow an option similar to the default rule at the end for all applications, eg…to block any app network activity that isnt listed.


What does your rule say exactly?