expose DNS port via Dockerfile rather than 'docker run' argument
That is "the Docker way".

Related to #141.