Also, we don't need 'bind', we need a DNS resolver. 'unbound' would work admirably, I'm sure.