Hello,
Thanks for asking. You don’t need any of those allow options, except for Allow Managed.
Setting Allow DNS will let zerotier set up a DNS configuration on mac, windows, and mobile.
I think the missing piece is you need a DNS server running for that domain.
We built one for this purpose:
more info:
https://zerotier.atlassian.net/wiki/spaces/SD/pages/900431890/DNS+Management