BIND 9.21.22 and logging of REFUSED and FORMERR

[sthaug at nethelp.no]

> The FORMERR messages are malformed negative responses.  Complain to the operator of the site.  Azure is adding the wrong SOA record to the negative response.  It should be for the zone which holds the record not some other random zone. 
> 
> The REFUSED will likely be a bad delegation pointing to a server that is no longer serving the zone. Again contact the operator of the zone in question. 

Yes, I agree that's what I should do. In practice, I don't have time
to follow up on these.

The high volume of REFUSED and FORMERR logging is new to 9.21, it
doesn't happen in 9.20 - so I'm asking how to reduce the logging
volume here.

Steinar Haug, AS2116