https://infosec.xyz/posts/transparent-proxy-l4/
DNS Security: Part 1 which can we do if we manage the dns? - Avengers Infosec