DNS configuration tampering on one of our GeoDNS servers

An NS volunteer might capture the DNS packets and manipulate them in flight. NS servers should never rely on volunteers, but be closed to them. Only the pool team should manage them on hosts under their full control.