Logs

[Jonathan de Boyne Pollard]

MR> late CNAME in answer section for download.windowsupdate.nsatc.net A 
from ["IP DNS ISP"].53

You are forwarding to a proxy DNS server provided by your ISP, and that 
server is returning responses that BIND doesn't like.  Specifically, it 
is returning responses with "CNAME" resource records in unexpected (but 
not technically incorrect) places.  Such responses trigger a buffer 
overflow bug in certain libraries, and this code detects them.