netwatch-dns: check with eworm.de and eworm.net

This should prevent against DENIC outages...

https://blog.denic.de/en/denic-reports-resolved-dnssec-disruption-affecting-de-domains/

global-functions.rsc

@@ -816,12 +816,11 @@
     :retry {
       :set I ($I ^ 1);
       :resolve ("low-ttl.eworm." . ({ "de"; "net" }->$I));
+      :return true;
     } delay=50ms max=6;
-  } on-error={
-    :return false;
-  }
+  } on-error={ }
 
-  :return true;
+  :return false;
 }
 
 # check if system is is fully connected (default route reachable, DNS resolving, time sync)