- Fix that dns64 bypasses rpz-passthru rule during

synthesis. This restricted more than necessary. Thanks to
  Qifan Zhang, Palo Alto Networks, for the report.