bind negative response cache poisoning

By spoofing negative reply it's possible to DoS name resolution while spoofed reply doesn't expire from cash...