Fix DNS replies

Adhere much more to the DNS protocol, give back NXDOMAIN and NODATA responses instead of the more dangerous SERVFAIL.

Also set the header bits correctly: we do provide recursion and we are authoritative for it (skydns.local.)