A multicast security control method based on Domain Name System, DNS, performed by a multicast security control device based on the DNS, and comprising: allocating domain name address information of an Internet Protocol Television, IPTV, server; transmitting a DNS request message to a domain name server, wherein the DNS request message includes the domain name address information of the IPTV server; receiving a response message, fed back by the domain name server, corresponding to the domain name address information of the IPTV server; and parsing the response message to acquire a multicast source DNS address list of the IPTV server; conducting address verification on a multicast data message according to the multicast source DNS address list and a locally maintained multicast address list after the multicast data message issued by the IPTV server is received; and conducting forwarding control on the multicast data message according to a verification result; prior to the step of conducting address verification on the multicast data message according to the multicast source DNS address list information and the locally maintained multicast address list, further comprising: receiving a multicast protocol message transmitted by the IPTV receiving device, and forwarding the multicast protocol message to the IPTV server; parsing the multicast protocol message, and judging whether the multicast protocol message is a joining message or a leaving message; and adding the corresponding multicast address information into the multicast address list if the multicast protocol message is the joining message; and deleting the corresponding multicast address information from the multicast address list if the multicast protocol message is the leaving message. allocating domain name address information of an Internet Protocol Television, IPTV, server; transmitting a DNS request message to a domain name server, wherein the DNS request message includes the domain name address information of the IPTV server; receiving a response message, fed back by the domain name server, corresponding to the domain name address information of the IPTV server; and parsing the response message to acquire a multicast source DNS address list of the IPTV server; conducting address verification on a multicast data message according to the multicast source DNS address list and a locally maintained multicast address list after the multicast data message issued by the IPTV server is received; and conducting forwarding control on the multicast data message according to a verification result; prior to the step of conducting address verification on the multicast data message according to the multicast source DNS address list information and the locally maintained multicast address list, further comprising: receiving a multicast protocol message transmitted by the IPTV receiving device, and forwarding the multicast protocol message to the IPTV server; parsing the multicast protocol message, and judging whether the multicast protocol message is a joining message or a leaving message; and adding the corresponding multicast address information into the multicast address list if the multicast protocol message is the joining message; and deleting the corresponding multicast address information from the multicast address list if the multicast protocol message is the leaving message. receiving a multicast protocol message transmitted by the IPTV receiving device, and forwarding the multicast protocol message to the IPTV server; parsing the multicast protocol message, and judging whether the multicast protocol message is a joining message or a leaving message; and adding the corresponding multicast address information into the multicast address list if the multicast protocol message is the joining message; and deleting the corresponding multicast address information from the multicast address list if the multicast protocol message is the leaving message.