When I ask my DNS server for a non existent domain it gives me no answer rather than saying "REFUSED":
#nslookup redhafdst.com. ns.myserver.com Server: ns.myserver.com Address: 188.8.131.52#53 Non-authoritative answer: *** Can't find redhafdst.com.: No answer
In windows it lists all the root servers:
> nslookup fakesite667.com ns.myserver.com Server: ns.myserver.com Address: 184.108.40.206 Name: fakesite667.com Served by: - H.ROOT-SERVERS.NET 220.127.116.11 ... - D.ROOT-SERVERS.NET 18.104.22.168 2001:500:2d::d
Is this normal behavior? Does it have something to do with a security risk or a bad configuration?