When I ask my DNS server for a non existent domain it gives me no answer rather than saying "REFUSED":
#nslookup redhafdst.com. ns.myserver.com Server: ns.myserver.com Address: 220.127.116.11#53 Non-authoritative answer: *** Can't find redhafdst.com.: No answer
In windows it lists all the root servers:
> nslookup fakesite667.com ns.myserver.com Server: ns.myserver.com Address: 18.104.22.168 Name: fakesite667.com Served by: - H.ROOT-SERVERS.NET 22.214.171.124 ... - D.ROOT-SERVERS.NET 126.96.36.199 2001:500:2d::d
Is this normal behavior? Does it have something to do with a security risk or a bad configuration?