More conservative handling of DNS proxy failure