Is there a firewall combined with DNS?

Question

firewall

I would like to see in the firewall a table of rules of the form "domain ---> permission / prohibition". Moreover, as a domain, not just a list a la hosts file, but masks like *.microsoft.com (or as it is done in Acrylic DNS). With a redirect to an upstream server (for example, 8.8.8.8).

That is, first a request comes to the DNS server in order to resolve a specific domain. Further, the firewall, having worked as a DNS, remembers the received ip and allows (or denies) access to it for a while in accordance with the rules table.

If there was no access to DNS, and the device breaks down immediately by ip, then the default ban or the usual access rules by ip and masks.

The nuance is that if there are two domains on the same ip, one is prohibited, the other is allowed, then the access decision is made just on the basis of which domain is resolved. Of course, a rare situation, the nuance is precisely in this.

Is there such a firewall?

Answer 1

pipehole

Answer 2

Hold