Most of the times you don't even need to dress the traffic as DNS requests or throttle it. You wouldn't believe how many otherwise "secure" places leave an open highway on UDP 53.