LTM Returns "Refused" DNS Response

Sorry for the misunderstanding: I read "VS I created a DNS VIP, used the DNS server as a Pool Member" and assumed that you'd moved on from a forwarder configuration. Either way, it still holds true: the named config on the BigIP shouldn't affect this at all.

 

 

So a couple of other thoughts: you've got it set up in a way that tells the BigIP to bind that 0.0.0.0 virtual to all vlans - internal, external, etc., so any traffic *that doesn't match a virtual server VIP* will pass through to this listener. It's somewhat more typical to bind a wide open forwarder to a specific VLAN for security reasons (e.g. the internal vlans for outbound access). Do you by chance have GTM installed on this box as well or any port 53 VIPs setup?

 

-Matt