Support being the system's main DNS resolver, send back replies from correct socket, don't spawn multiple proxies for the same domain
Better (and configurable) logging output control
Implement blocking policy for unknown domains. Default is to let them through.
Add privacy notice to README.md