I am helping a client create a Vendor VPN on a 5515 ASA.  They will be limited to a single subnet but need access to one internal IP address for internal DNS.  We have the ACL's in place but DNS will not work.  I did an asp-drop packet capture and am...