The DNS Guard within the PIX does a couple of things, one is that when it sees the DNS request go out, and when it sees the DNS reponse come back in, it verifies that they match up together, and closes down that opening straight away. So basically you can only have one response per request come back through, any subsequent response will be denied and you'll see this error.
The usual cause of this error is that 204.117.214.10 took too long to respond, and the query was answered by another DNS server. When that response went through the PIX, the PIX closed down the session, and the later response from 204.117.214.10 was denied. Not usually anything to worry about.
In 6.3 code you can turn off the DNS Guard, although I wouldn't recommend this, cause it means DNS packets will be treated as standard UDP packets and time out after 2 minutes rather than straight after the DNS Response. If you do a lot of DNS queries then this will dramatically increase your xlate and conn count, so you'll want to keep an eye on it. The command to turn it off is:
no fixup protocol dns
