use shExpMatch to replace  dnsDomainIs