On Thu, 02 Feb 2012 04:02:19 -0600, Jaap Akkerhuis <jaap at nlnetlabs.nl> wrote: > I think that letting unbound just answer is likely to cost less > resources then anything else one comes up with. Agreed. Is there a reason you're running a public facing DNS server, OP? Seems kind of silly that you wouldn't just firewall it for the few people that need it.