When I ask my DNS server for a non existent domain it gives me no answer rather than saying "REFUSED":
#nslookup redhafdst.com. ns.myserver.com Server: ns.myserver.com Address: 22.214.171.124#53 Non-authoritative answer: *** Can't find redhafdst.com.: No answer
In windows it lists all the root servers:
> nslookup fakesite667.com ns.myserver.com Server: ns.myserver.com Address: 126.96.36.199 Name: fakesite667.com Served by: - H.ROOT-SERVERS.NET 188.8.131.52 ... - D.ROOT-SERVERS.NET 184.108.40.206 2001:500:2d::d
Is this normal behavior? Does it have something to do with a security risk or a bad configuration?