use dns whitelist