high volume from outside our networks question

[Steven Carr]

So the response you received wasn't recursed ";; WARNING: recursion
requested but not available", so at least that ACL is holding up, but
it could be that the response you got is still being served from your
DNS server's cache. Can you share the exact configuration statements
you have implemented for allow-recursion and allow-query-cache and are
these options in the view stanza or in the global options?

Best practice is that authoritative and recursive DNS servers should
be completely separate.

Steve