Diego is providing pointers to plugging the DNS recursion holes. A must-read if you're running your own DNS/bind server.