Create asa-expect-botnet-filter.sh

dns domain-lookup outside
dns server-group DefaultDNS
    name-server 8.8.4.4
    domain-name yourdomain.com
 
 
access-list dynamic-filter_acl extended permit ip any any
dynamic-filter enable interface outside classify-list dynamic-filter_acl
class-map dynamic-filter_snoop_class
 match port udp eq domain
 
policy-map dynamic-filter_snoop_policy
 class dynamic-filter_snoop_class
 inspect dns dynamic-filter-snoop
service-policy dynamic-filter_snoop_policy interface outsid