This acl is available on Artica v4.40 or Artica 4.30 Service pack 689 or above
When adding a new object, choose the “DNS Query type" object.

Edit the object and add the DNS Types separated by a carriage return

Valid DNS Record Types are :
| A |
Address Mapping record (A Record)
|
| NS |
Name Server records (NS Record)
|
| CNAME |
Canonical Name record (CNAME Record)
|
| SOA |
Start of Authority (SOA Record)
|
| WKS |
A well known service description
|
| PTR |
Reverse-lookup Pointer records (PTR Record)
|
| HINFO |
Host information
|
| MINFO |
Mailbox or mail list information
|
| MX |
Mail exchanger record (MX Record)
|
| TXT |
Text Record (TXT Record)
|
| RP |
For Responsible Person
|
| AFSDB |
For AFS Data Base location
|
| X25 |
For X.25 PSDN address
|
| ISDN |
For ISDN address
|
| RT |
For Route Through
|
| NSAP |
For NSAP address, NSAP style A record
|
| NSAP-PTR |
For domain name pointer, NSAP style
|
| SIG |
For security signature
|
| KEY |
For security key
|
| PX |
X.400 mail mapping information
|
| GPOS |
Geographical Position
|
| AAAA |
IP Version 6 Address record (AAAA Record)
|
| LOC |
Location Information
|
| EID |
Endpoint Identifier
|
| NIMLOC |
Nimrod Locator
|
| SRV |
Service Location (SRV Record)
|
| ATMA |
ATM Address
|
| NAPTR |
Naming Authority Pointer
|
| KX |
Key Exchanger
|
| CERT |
Certificate record (CERT Record)
|
| DNAME |
DNAME
|
| SINK |
SINK
|
| OPT |
OPT
|
| APL |
APL
|
| DS |
Delegation Signer
|
| SSHFP |
SSH Key Fingerprint
|
| IPSECKEY |
IPSECKEY
|
| RRSIG |
RRSIG
|
| NSEC |
NSEC
|
| DNSKEY |
DNSKEY
|
| DHCID |
DHCID
|
| NSEC3 |
NSEC3
|
| NSEC3PARAM |
NSEC3PARAM
|
| TLSA |
TLSA
|
| SMIMEA |
S/MIME cert association
|
| HIP |
Host Identity Protocol
|
| NINFO |
NINFO
|
| RKEY |
RKEY
|
| TALINK |
Trust Anchor LINK
|
| CDS |
Child DS
|
| CDNSKEY |
DNSKEY(s) the Child wants reflected in DS
|
| OPENPGPKEY |
OpenPGP Key
|
| CSYNC |
Child-To-Parent Synchronization
|
| ZONEMD |
Message Digest Over Zone Data
|
| SVCB |
Service Binding
|
| HTTPS |
HTTPS Binding
|
| SPF | |
| EUI48 |
an EUI-48 address
|
| EUI64 |
an EUI-64 address
|
| TKEY |
Transaction Key
|
| TSIG |
Transaction Signature
|
| IXFR |
incremental transfer
|
| AXFR |
transfer of an entire zone
|
| MAILB |
mailbox-related RRs (MB, MG or MR)
|
| URI |
URI
|
| CAA |
Certification Authority Restriction
|
| AVC |
Application Visibility and Control
|
| DOA |
Digital Object Architecture
|
| AMTRELAY |
Automatic Multicast Tunneling Relay
|
| TA |
DNSSEC Trust Authorities
|