dns: reply with SOA