Block >3 length domains from the main site.

Allow them for CNAMEs and other processing,
which is the only valid use.