i think that would be nice that ispconfig bind root configuration file (named.conf), should include: allow-recursion { 127.0.0.1; NS1_IP; NS2_IP; }; by this way we limit recursion to our local machine & our name servers. It's much more secure for preventing ddos attacks. thks in advanced...