--- bin/named/client.c.org	Wed Aug  6 12:59:06 2008
+++ bin/named/client.c	Fri Mar  6 07:11:42 2009
@@ -1131,6 +1131,16 @@ ns_client_error(ns_client_t *client, isc_result_t resu
 		client->formerrcache.time = client->requesttime;
 		client->formerrcache.id = message->id;
 	}
+
+	if (dns_rcode_refused == rcode) {
+		/* Drop packet. */
+		ns_client_log(client, NS_LOGCATEGORY_CLIENT,
+					  NS_LOGMODULE_CLIENT, ISC_LOG_WARNING,
+					  "REFUSED dropped");
+		ns_client_next(client, result);
+		return;
+	}
+
 	ns_client_send(client);
 }