For the FQDN rules to work, the firewall needs to ... security group to only allow DNS queries from your IP address at the network(s) in question. But really, the firewall should be able to ...