Dns resolver-assisted domain name-based access control

A domain name system (DNS) server, comprising:

• a DNS resolver;
• a firewall device communicatively coupled to the DNS resolver;
• a processor;
• and
• a non-transitory computer-readable media storing instructions that, when executed by the processor, causes the processor to perform operations comprising:
• with the DNS resolver:
• receiving, at the DNS resolver, an access policy associated with the firewall device based at least in part on a creation of the access policy at the firewall device;
• receiving, from a client device, a request for an internet protocol (IP) address associated with a domain name;
• determining the IP address associated with the domain name;
• sending first data defining the IP address associated with the domain name to the client device;
• sending second data defining the IP address associated with the domain name to the firewall device, the second data including an identification of the client device;
• with the firewall device:
• generating a domain name registry (DNR) entry of the second data defining the IP address associated with the domain name including the identification of the client device;
• receiving a data packet from the client device addressed to the IP address based at least in part on the sending of the first data defining the IP address associated with the domain name to the client device;
• inspecting the data packet for the IP address;
• and
• determining that the IP address matches the domain name within the DNR entry.

A non-transitory computer-readable medium storing instructions that, when executed, causes a processor to perform operations, comprising, with a firewall device communicatively coupled to a DNS resolver:

• generating a domain name registry (DNR) entry of first data defining an internet protocol (IP) address associated with a domain name based at least in part on a DNS query request from a client device, the first data defining the internet protocol (IP) address associated with the domain name being sent from the DNS resolver;
• receiving a data packet from the client device addressed to the IP address;
• inspecting the data packet for the IP address;
• and
• determining that the IP address matches the domain name within the DNR entry.