refactoring natdns to use the unless syntax