I had the same issue but this was caused by the ISP modem/router forcing dns packets throught to there caching dns which was breaking dns-sec. Simply I stopped using there modem and wired purchased...

I checked policy routing but that is a bit convoluted way to do it. but this does need to be fixed. basically you open port to subnets then use policy routing to route the port. you'll need to make...

Is there a way to import or sync a Blocklist and or an access list for IP/Mac/url This would go a long way to help secure networks though a central list via https:// Then an Option to Schedule...