R Dicaire wrote:
> [..] external client queries for data
> my NS isn't authoritative for no longer show cache query denied in
> syslog, but instead return a list of the tld root servers.
> Is this the appropriate response/behaviour?

You are providing a referral to the roots for labels that you are not
authoritative for.

This is normal, but shows that those clients are asking you for
recursion (which you are not willing to do). You need to find those
clients and reconfigure them to use the correct recursive servers.

AlanC