> I discover that servfail are not cached. is it normal? Yes, that's normal. Temporary negative caching of SERVFAIL responses for a limited period (up to 30 seconds, if I recall correctly) is permitted by the DNS protocol, and we've discussed implementing it in BIND9, but haven't had time yet. -- Evan Hunt -- each at isc.org Internet Systems Consortium, Inc.