Add evidence source and rules for DNS parameters