iRule to drop Public IP access to DNS Wide-ip

We can't do just that because we want to block public ip from only specific wide-ip (eg. abc01.example.com)
but user from public can resolve for abc02.example.com and more.

I think that we need iRule that check if client IP is private or not and also check if those client access to abc01.example.com or not.
e.g. 
if client not eq [private_ip_datagroup] && try to resolve wideip [abc01.example.com]
drop
else
return

Not sure if there is that irule though