DNS request filtering for blocklisted domains

You can configure DNS filtering to identify DNS requests for blocklisted website domains. For DNS request types A, AAAA, MX, CNAME, TXT, SRV, and ANY, you also configure the action to take for a DNS request for a blocklisted domain. You can either: 

• Block access to the website by sending the client a DNS response corresponding to the DNS request type with the IP address or fully qualified domain name (FQDN) of a DNS sinkhole server. This ensures that the client sends further traffic for the blocklisted domain to the sinkhole server. 
• Log the request and allow access. For other DNS request types for a blocklisted domain, the request is logged and access is allowed.