rework dns_spoof plugin to support ANY queries