how to filter DNS REFUSE response in RouterOS?

RouterOS General
1

Hi!

I need to write a filter rule that will add an IP address to list by content, how to filter DNS response “REFUSE” by content? What I have to write as a content string in a filter rule?

Thanks,
G.

2

someone just attack my DNS servers from a botnet with the requests that my servers should reject, like SOA ripe.net, google.com and so on, I want to block them