On 3/21/26 2:49 PM, Nick Tait via bind-users wrote:

Your theory sounds entirely plausible. Are you aware of the "forward" option (https://bind9.readthedocs.io/en/latest/reference.html#namedconf-statement-forward)?:

    *Grammar: *|forward ( first | only );|

    *Blocks: *options, template, view, zone (forward, primary,
    secondary, static-stub, stub)

    *Tags: *query

    Allows or disallows fallback to recursion if forwarding has
    failed; it is always used in conjunction with the |forwarders|
    
<https://bind9.readthedocs.io/en/latest/reference.html#namedconf-statement-forwarders>
    statement.

    This option is only meaningful if the |forwarders|
    
<https://bind9.readthedocs.io/en/latest/reference.html#namedconf-statement-forwarders>
    list is not empty. A value of |first| is the default and causes
    the server to query the forwarders first; if that does not answer
    the question, the server then looks for the answer itself. If
    |only| is specified, the server only queries the forwarders.

i.e. If you wanted to stop BIND from making the 'last ditch effort', you could try setting the forward option to "only".



Thanks, I tried that and it seems to have quieted down the log spamming.

The real fix is to get this DNS interference turned off, of course.

Ted
-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list.

Reply via email to