Need example of SEPM firewall config for Domain Controllers

After migrating to SEPM 12.1 (finally) we have everything working except for the firewall.  We did not have a firewall configured with 11.x but need to implement one for 12.1.  I have tried several configs but a few hours after applying one, the DC's both stop serving out filesharing and log on requests.

Here is a copy of the draft config I have been working on; hopefully someone can post a working config they have running already.  I am not sure why communications are being cut off, I am allowing DNS / DHCP; any traffic from the other DC and blocking IPv6.  Can anyone point me in the right direction; either a policy they have running or to some documentation that would be helpful?

Cyber_Saiyan