dns: allow limiting dns entry matching to cname name