add the ability to have "forward-only" dns (we don't host the reverse, i.e. upstream point to points)