oh nss modules wouldn't either. Perhaps intercepting and rewriting every dns request would be needed.