[_nickwhite]

This seems like a good idea... until your self-hosted DNS server starts getting DoS attacked. I've had seemingly innocent servers practically taken off the Internet with UDP/53 floods- very easy for any 12-year-old to execute.

[bemused]

this dns server only needs to run for 5 minutes every 4 weeks while renewing certs - no open ports otherwise