Quoting wirelessduck@??? (wirelessduck@???):

> I'm not much of a BIND9 expert, so I'll happily try out something else
> if it's considered to be more secure.

I concur with Steve's comments about the desirability of separating
recursive service from authoritative service -- and I _am_ a BIND9
longtime admin. ;->