iptables tips and dns caching only using bind update