Allow staging network to request internal dns

A removal of a too inclusive NAT rule on the firewall now exposes the
real ip of the staging servers (they were seen as the gateway).
They must be explicitly allowed to request the dns.