z5 - using DMZ as network segment for IoT - DNS?

So, I'm using the DMZ subnet for all my IoT devices. I'm noticing that in the logs, one device is trying to get DNS from the z5 (it's in my DNS chain that I send out in DHCP), and it's getting blocked. in the firewall rules, the default rule from DMZ to WAN1 is permit. I'm not getting similar drops on any other subnet, and they have the same XXX to WAN1 rules. the log is this: Remote Management: DNS denied 192.168.43.52:53 192.168.43.1:53 ACCESS DROPPED I'm not sure why it's seeing it as remote management, and i can't figure out why it's being dropped. the only thing is that it's trying for 192.168.43.1:53 and not 192.168.0.1.53... any ideas? thanks for any help. -jig