How to set up whitelist on bind or other software for working with dns?

Question

linux

Hello.
I have a problem - 200 different sites that need to be opened for the university network. So that people can visit them. Now here's the catch - I don't want to restrict them through squid type proxies - because a lot of these sites run on https, and the only option I know of to set up squid is to spoof certificates, which results in users having red and yellow messages appear on the screen that the certificate is not a certificate, and so on.
I had to settle for the idea that bind would help me sort through 200 domains.
The funny thing is, I cannot write a rule that would prohibit the root domain, but at the same time would allow yandex.ru at the same time. Any ideas on how to do this? Maybe not a bind?

Answer 1

right in the Russian Federation, log in, we recognized you)

Answer 2

Create all zones with the necessary A records,
disable recursion in the bind,
get what you want