DNS contamination

You could always code it and submit it to the BIND maintainer!

Neil