Blocking corrupt nameservers.

[André Paulsberg]

Is there a *good* way in the bind configuration to block it from using
certain nameservers, that are either corrupt or is compromised in other
ways.
Lets say foobar.com had 5 nameservers and one of them (ns2.foobar.com)
always caused some error to occur or bad data to be sent to us,
or just was never update with correct information.

Blocking the DNS traffic on our routers seems a bad choice,
since this will delay the lockups and risk other traffic to be lost.


Regards André Paulsberg