port lockdown on GTM - do I have to include DNS ports?

I'd like to create custom port lockdown restrictions for a GTM to allow all hosts from my enterprise network and block management connection attempts from anywhere else. When I generate the lockdown...