dns: reply with tld on SOA