using the examples below
dig +trace stackoverflow.com dig +trace google.com
dig +trace yahoo.com dig +trace bbc.com
the first two show me only the A records for the queried domain, while the last two show me the A, or CNAME, as well as multiple NS records.
Can someone explain what config on the DNS server controls this behaviour, causing all of your nameservers being sent in response to this type of dig lookup. Also, is it possible to disable this behaviour so in the first two examples.. so that only the A record is sent and not the authoritative nameservers as well?
I would like to sync my domain with UltraDNS and configure the domain to use their nameservers to avoid DNS DDoS attacks on our DNS servers. But with the above behaviour, when people 'dig +trace' the domain it replies with our nameservers so making the exercise of trying to hide them pointless.