Determining case of REFUSED queries

[J Doe]

Hi list,

I have BIND 9.18.29 validating recursive resolver running on OpenBSD
7.5.  This resolver performs resolution for a mail server.

Sometimes in my logs I will see the following:

     17-Sep-2024 16:21:41.562 lame-servers: info: REFUSED unexpected
       RCODE resolving 'google._domainkey.socialinnovation.ca/TXT/IN':
       173.245.59.231#53

... but if I manually resolve the address with: dig against the resolver
on the command line of the mail server, no errors are recorded.

I'd like to determine why sometimes I receive this error.  I currently
have logging for this category of errors set to: severity info.  Should
I increase this or are there other ways to determine why resolution is
sometimes REFUSED ?

Thanks,

- J