Prevent DNS exfiltration

[evgeniy-scherbina]

Related projects:

• https://github.com/coder/httpjail/tree/main/docs/advanced

NOTE: target domain isn't used inside NS (we rely on Host Header). So we can create fake DNS server, and never reach actual DNS servers to prevent exfiltration.