instead of assuming it's on the Docker bridge Also move DNS address validation into NewDNSServer(), so we only do it once.