Lock out "A-for-A" DNS lookups.