implement DNS Qname suffix based filter