How do I stop dnsmgr from resolving the URL in chan_sip register string

Referring to a PJSIP trunk, If I I set both ‘Allow Anonymous Inbound SIP Calls’ and 'Allow SIP Guests ’ to Yes, I can receive incoming calls. For security I believe I’d want these set to ‘No’. Where would I enter the carrier domain to allow incoming calls only from that carrier?. If I try setting Auth username to
[email protected], the trunk won’t initial register. Leaving it blank, it will register. Thanks for any help!