Deny unknown domains via the proxy acls feature