def rule(event):
    if all(
        [
            event.deep_get("EventID", default="") == 257,
            event.deep_get("QNAME", default="")
            in [
                "asyspy256.ddns.net",
                "hotkillmail9sddcc.ddns.net",
                "rosaf112.ddns.net",
                "cvdfhjh1231.myftp.biz",
                "sz2016rose.ddns.net",
                "dffwescwer4325.myftp.biz",
                "cvdfhjh1231.ddns.net",
            ],
        ]
    ):
        return True
    return False
