Defer instead of accept in dns control when it's not dns.