add unbound. why use dns resolvers owned by others when you can have one...

... at 127.0.0.1?