On Thu, Feb 01, 2007 at 01:18:40PM +0300, Wael Shahin <wael.shahin at gmail.com> wrote a message of 13 lines which said: > how can I prevent the replies that non-clients can get from my DNS servers You need BIND >= 9.4 and use the new directive allow-cache.