* Geo. wrote: > Unrelated question just for my own education, when you say ignoring > nxdomain, do you mean they don't cache an nxdomain response? Another > question, if a server does cache an nxdomain response, how does it know what > TTL to use? Use DNSSEC. This allows and encourages caching of NXdomain ...