whitelist=newDS()
whitelist:add(dofile("/etc/pdns-recursor/lua/compassws/allowed.lua"))

function preresolve(dq)
   if not whitelist:check(dq.qname) then
     dq.rcode = pdns.NXDOMAIN
     return true
   end
end