Patches from Kevin

Fixups from @kevinmehall addressing 2 issues.

* Reintroduce ip blacklisting but do dns resolution to ensure there's no easy way to circumvent the list
* Verify that proxied data does not exceed the max body size to be proxied. Node doesn't verify that the content-length header matches the size of the returned body in any way.