Subject: isolate DS nxdomain responses MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" X-Mailer: MIME-tools 5.428 (Entity 5.428) Content-Disposition: inline Content-Transfer-Encoding: binary X-RT-Original-Encoding: utf-8 Content-Length: 230 Isolate DS NXDOMAIN responses. This will help when zones are grafted on using forward zones but is not a real fix as validating client will not work when the "parent" zone is signed as is the case when grafting on tld's this way.