Why does the ProxySG respond with an "ICMP destination (port) unreachable" packet when a particular DNS transaction occurs?