limiting DNS queries