restrict_ssh_access.rb handle dns cname