# Drop certain DNS queries (ANY and RD)

**URL:** <https://community.a10networks.com/t/drop-certain-dns-queries-any-and-rd/223>\
**Category:** aFleX\
**Created:** [October 5, 2013, 12:27pm UTC](https://community.a10networks.com/t/drop-certain-dns-queries-any-and-rd/223 "2013-10-05T12:27:03Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![mischa](https://avatars.discourse-cdn.com/v4/letter/m/b9bd4f/32.png) [@mischa](https://community.a10networks.com/u/mischa)\
**Post date:** [October 5, 2013, 12:27pm UTC](https://community.a10networks.com/t/drop-certain-dns-queries-any-and-rd/223/1 "2013-10-05T12:27:03Z")

</div>

When you don’t want to allow certain DNS queries to be send to the DNS server.

`when RULE\_INIT { set ::DEBUG 0 }

when DNS\_REQUEST { if { $::DEBUG == 1 } { log “Question: name: [DNS::question name] - type: [DNS::question type] - Query ID: [DNS::header id] - RD: [DNS::header rd]” } if { [DNS::question type] eq “ANY” } { if { $::DEBUG == 1 } { log “Drop ANY query from [IP::client\_addr]” } drop } elseif { [DNS::header rd] } { drop if { $::DEBUG == 1 } { log “Drop RD query from [IP::client\_addr]” } } }`

---

<div class="post-metadata">

**Author:** ![mischa](https://avatars.discourse-cdn.com/v4/letter/m/b9bd4f/32.png) [@mischa](https://community.a10networks.com/u/mischa)\
**Post date:** [October 9, 2013, 3:01pm UTC](https://community.a10networks.com/t/drop-certain-dns-queries-any-and-rd/223/2 "2013-10-09T15:01:58Z")

</div>

File attached.