I played with something similar recently, and actually ended up throwing in the +norecurse option on dig. That way, if the "secondary" didn't have the zone locally, you'd be able to tell because eventually any cached entries would timeout and the response would disappear. Jim