use a server that we control to test socket destruction, rather than expecting the OS to kill requests that fail DNS