I think the short answer is don't use the host command, always use dig. Not sure how to find the version of host (none of the usual -V -v -h flags seem to work with it) but on my system (OS X 10.8) host returns refused for the same query...
sjcarr@elmo:~ $ host www.undernet.org. ns1.ausics.net Using domain server: Name: ns1.ausics.net Address: 62.113.243.167#53 Aliases: Host www.undernet.org not found: 5(REFUSED) Same as dig... sjcarr@elmo:~ $ dig www.undernet.org. @ns1.ausics.net ; <<>> DiG 9.8.3-P1 <<>> www.undernet.org. @ns1.ausics.net ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 49412 ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0 ;; WARNING: recursion requested but not available ;; QUESTION SECTION: ;www.undernet.org. IN A ;; Query time: 62 msec ;; SERVER: 62.113.243.167#53(62.113.243.167) ;; WHEN: Thu Aug 29 07:45:35 2013 ;; MSG SIZE rcvd: 34 Steve
_______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users