See the second part of my reply A configuration change to NSD (the name server daemon in use by MIAB I believe)