That works for authoritative to resolver. I am not really sure there are stub resolver that would honor the SOA TTL/minimum for negative caching. Perhaps something like full stub resolver (systemd-resolved) might, but generally speaking, I think the stub cache is small with short expiration.
Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 5. 12. 2025, at 17:47, Jesus Cea <[email protected]> wrote: > > The SOA in ADDITIONAL in a NXDOMAIN response allow for negative caching, as > described in RFC 2308. -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list.

