this DNS thing is tricky