only show dns with --dns flag