add local dns and enforce ulimit