Add test for DNS resolution failure in ClientIpFilter

Per frm's suggestion, we could refactor a bit ClientIpFilter and extract the calls to InetAddress.getByName() into their own interface, say InetAddressResolver. We could then write a test with bogus implementation of InetAddressResolver and assert the behaviour of the ClientIpFilter.