A network packet is routed correctly but blocked by an ingress policy on the receiving VM. The intended source and destination are approved. Which approach best fits?

1. Create a private Cloud DNS zone with the appropriate network authorization.
2. Configure supported inbound DNS forwarding and on-premises forwarding rules.
3. Configure an appropriate Cloud DNS forwarding zone or outbound forwarding policy.
4. Add or adjust the narrowly scoped applicable ingress firewall rule.