Recursive, validating DNS resolver