+note about programs that do their own DNS lookups