Hi there See; https://kb.isc.org/article/AA-01639/0 I don't think not using deny-answer-aliases is really an option. Regards, Rob