NXT Record Bug - Does 8.2.2.p4 protect other servers?

[carson at tla.org]

If our firewall bastion hosts are running BIND-8.2.2.p4, do they protect
internal name servers from the malicious NXT records? Or must every name
server be upgraded to protect against external attack (a much more difficult
proposition)?

-- 
Carson Gaspar -- carson at tla.org carson at cs.columbia.edu carson at cugc.org
http://www.cs.columbia.edu/~carson/home.html
Queen Trapped in a Butch Body