On Wed, Mar 26, 2014 at 12:16:50PM -0500, deoren wrote: > >I use powerdns recursor locally on my MX. It is designed for, targeted > >at, extremely high volume query loads, e.g. ISP environments, thus > >logging such failures would be useless due to the sheer volume. Think > >web pages containing multiple broken/dead links, then multiply times > >millions of page loads per day. > > Thanks for the recommendation and thanks also for confirming that it seems > to be a widespread thing. I'll look into powerdns recursor requirements and > give it a spin.
You probably don't need a particularly exotic recursive nameserver. Ones that are optimized for performance, may not be optimized for security. If you want something other than BIND consider "unbound". -- Viktor.