make 'dns_lookup' usable

Would be nice to have dns_lookup rules working.  Right now, supplying a string yields an assertion failure.