Comment Re:Accidentally, or not? (Score 1) 179
This has to do with not good thought out default settings of the various DNS servers out there, but also has to do with people running too old DNS servers.
You can restrict recursing resolve based on source IP, groups of IP or subnets.
First I do is define an internal mode and an external mode where external mode only sees an authoritive server and the internal mode can do recursed resolving.