How can I Log Denied or Failed Queries

[jb]

Hello,

I'm using Bind 9.3 and have  allow-recursion set to my local network. I 
would like to log queries for domains that I'm authoritative for but do 
not have a zone file. If that is not possible, I'd like to log all 
failed or denied queries.

TIA,

jb