BIND Authorative forwarding caching server

[dan at nameplanet.com]

Hello.

Can BIND be set up to not have ANY zone files, and just be an
authoritative forwarder? So the real DNS server is on the internal
network and say 3 publicly facing DNS servers are just caching queries.
We can't use zone transfers/slave configurations.

I need a named.conf SOMETHING like this:

options {
     directory "/var/named";
     pid-file "named.pid";
     allow-query { any; };
     auth-nxdomain yes;
     forwarders {10.0.0.10;};
     forward only;
};

Unfortunaly, the auth-nxdomain flag doesn't do it.
I am not looking for a debate on the architecture - just wishing to
know if it is possible.