A stateful firewall inspects outbound traffic, but return packets bypass it and sessions fail. What change addresses the underlying problem?

1. Increase application retries while keeping the asymmetric routing.
2. Rename the firewall rule group to symmetric.
3. Enable more verbose DNS logging as the only fix.
4. Correct the forward and return routes to preserve the intended symmetric inspection path.