Re: Logs

MR> late CNAME in answer section for download.windowsupdate.nsatc.net A
from ["IP DNS ISP"].53

You are forwarding to a proxy DNS server provided by your ISP, and that
server is returning responses that BIND doesn't like. Specifically, it
is returning responses with "CNAME" resource records in unexpected (but
not technically incorrect) places. Such responses trigger a buffer
overflow bug in certain libraries, and this code detects them.