Digi TransPort WR11 User Manual page 777

Configuring security
[dnslist]
The [dnslist] firewall script field matches packets containing DNS names in a given dnslist. Following
dnslist, there must be a name of a DNS list as specified by the #dns command.
For example, consider the following DNS list:
#dns ggl i st www. Di gi . co. * , www. * . co. nz
The following firewall rule blocks all DNS lookups to DNS names matching the above list:
bl ock out br eak end on ppp 1 pr ot o udp dnsl i st ggl i st f r om any t o any por t =dns
Digi TransPort® Routers User Guide
Firewall
777