Should I trust Svchost.exe

Svchost.exe always asks for permission of the following connections.
dns (53)

I can’t go online if I do not allow above connections.
5355 -tcp 80 (This one is Microsoft IP)

I can go online even do not allow these connections.
Would it be better and no hurt to allow them ?

I read a previous post of Svchost.exe.
Is it a safe way to stop all incoming connection and allow all outgoing connection ?
Is there any malwares that use the Svchost.exe to connect outside ?

Easiest way to set up a rule for svchost.exe is to make it Outgoing Only.

Notice that you cannot make rules for the separate svchost instances. That has been requested many times.