Explanation/Reference:
Explanation:
To configure Windows Firewall on a managed DNS server
On the Server Manager menu, click Tools and then click Windows Firewall with Advanced Security.

Right-click Inbound Rules, and then click New Rule. The New Inbound Rule Wizard will launch.

In Rule Type, select Predefined, choose DNS Service from the list, and then click Next.

In Predefined Rules, under Rules, select the checkboxes next to the following rules:

- RPC (TCP, Incoming)
- DNS (UDP, Incoming)
- DNS (TCP, Incoming)
- RPC Endpoint Mapper (TCP, Incoming)
Click Next, choose Allow the connection, and then click Finish.

Right-click Inbound Rules, and then click New Rule. The New Inbound Rule Wizard will launch.

etc.
Reference: Manually Configure DNS Access Settings