always proxy tcp dns query