Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

When I ask my DNS server for a non existent domain it gives me no answer rather than saying "REFUSED":


Non-authoritative answer:
*** Can't find No answer

In windows it lists all the root servers:

> nslookup

Served by:



Is this normal behavior? Does it have something to do with a security risk or a bad configuration?

share|improve this question
up vote 1 down vote accepted

Refusing queries for random domains is an indication that's it's configured to be authoritative only, and to refuse requests for which it doesn't directly have a zone file.

There's a handful of options that combine to determine a BIND server's recursion behavior, but mostly, you're looking for the settings of the recursion and allow-recursion options. They're either disabled, or recursion may be enabled but your host isn't in the allow-recursion list.

share|improve this answer
Authoritative Only was the key, now it works as expected. Thanks. – Marcelo González Aug 15 '11 at 6:37

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.