As suggested by title, I propose that Ruleset LAN should never trigger a DNS lookup. I cannot think of any reason why it would make any sense.
Given its nature, it mostly likely is placed on the top of the rule set, so it is annoying that it could trigger a DNS lookup.
Comments are welcomed.