ICMP is used to signal network layer (IP) or transport layer (TCP, UDP, ...) errors.
In this case, the ICMP sender 192.168.2.228 informs the initial sender 192.168.2.1 that a transport layer port cannot be reached. The ICMP payload contains parts of the problem packet with the network and transport layer headers. In your case that seems to have been a DNS reply.
Note that host configurations and issues are off-topic here, so we can't dive into the actual reason for the rejection.