Type dig www.google.com @1.1.1.1 Note how it works despite being udp out though your firewall, being batted to a public ip, and the reply on a connection less

Type dig www.google.com @1.1.1.1 Note how it works despite being udp out though your firewall, being batted to a public ip, and the reply on a connection less protocol coming back in and being let through and correctly sent to the correct internal ip, even though someone else in another ip did exactly the same for www.bing.com at the same time.