> Still, breaking bind's access to root name servers is particularly > troublesome because it may tend to break all net access. It may be > worthwhile to remove db.root from the list of configuration files. > Especially, because this list isn't something anyone should need to > change.
I beg to disagree. Changing db.root is the primary way to use an alternate DNS root (either for an all-internal DNS, or to utilize an alternate DNS root than NetSol's). Just because you can't see why something might be configured differently doesn't mean other people can't.