better diagnostics for DNS failure