Looks to me like what happens when you click on Help/links. A UDP datagram is sent out for a DNS lookup of the site listed, which just asks "what is the IP address of site x?" and when it gets the number back it can use it to launch your Web Browser. I'm surprised that the firewall software does not tell you what IP address or name (and port) the data was being sent TO, only the one it comes FROM, as that information is useless.