more proving stuff
further fixes for dns proofs