pelln at icke-reklam.ipsec.nu.invalid wrote: > > and very short TTL on the SOA's default TTL ( but that could change now) There is no default TTL in the SOA record *8-). One hour seems a bit generous for negative caching to me. Now one hour on the $TTL directive is a little small, but not unusual these days.