ip6tables dependency now optional, fixes #8
blocking MX, PTR, CNAME and NS records recursively