kernel dns requests filter