Recursion Off

[David]

Currently our DNS allows recursive queries from all users.  We would
like to tighten up our security and limit the public use of our DNS.

Our current DNS uses views to allow "internal" users access to our
machines and those on the Internet and to resolve "external" queries
from the public to our machines.

By turning off recursion in our "external" view, will this completely
restrict "external" users from abusing our DNS with queries that we
are not the authoritative source for?  Does the cache need to be
cleared and disabled?  What will our DNS response be when a recursive
query is made for which we are not the authoritative source?

Using nslookup, I tried using a Yahoo DNS server to look up abc.com
and got this:

Non-authoritative answer:
*** Can't find abc.com: No answer

Authoritative answers can be found from:
.       nameserver = K.ROOT-SERVERS.NET.
.       nameserver = L.ROOT-SERVERS.NET.
.       nameserver = M.ROOT-SERVERS.NET.
.       nameserver = I.ROOT-SERVERS.NET.
.       nameserver = E.ROOT-SERVERS.NET.
.       nameserver = D.ROOT-SERVERS.NET.
.       nameserver = A.ROOT-SERVERS.NET.
.       nameserver = H.ROOT-SERVERS.NET.
.       nameserver = C.ROOT-SERVERS.NET.
.       nameserver = G.ROOT-SERVERS.NET.
.       nameserver = F.ROOT-SERVERS.NET.
.       nameserver = B.ROOT-SERVERS.NET.
.       nameserver = J.ROOT-SERVERS.NET.
K.ROOT-SERVERS.NET      internet address = 193.0.14.129
L.ROOT-SERVERS.NET      internet address = 198.32.64.12
M.ROOT-SERVERS.NET      internet address = 202.12.27.33
I.ROOT-SERVERS.NET      internet address = 192.36.148.17
E.ROOT-SERVERS.NET      internet address = 192.203.230.10
D.ROOT-SERVERS.NET      internet address = 128.8.10.90
A.ROOT-SERVERS.NET      internet address = 198.41.0.4
H.ROOT-SERVERS.NET      internet address = 128.63.2.53
C.ROOT-SERVERS.NET      internet address = 192.33.4.12
G.ROOT-SERVERS.NET      internet address = 192.112.36.4
F.ROOT-SERVERS.NET      internet address = 192.5.5.241
B.ROOT-SERVERS.NET      internet address = 192.228.79.201
J.ROOT-SERVERS.NET      internet address = 192.58.128.30

I'd like our server to spit out something like this when an
unauthorized user tries to use our DNS.