ssh restrict dns geo and dns primary hosts