Your absolutly right, the described scenario would be a privacy and security nightmare.So sending the requests to all available DNS servers in absence of better routing info is a great enabler:I fail to see why sending queries to all servers is a good plan. The redhat vpn dns servers surely can't resolve the hostnames for my local lan, and frankly they shouldn't even know which hosts I try to access. Likewise my ISP shouldn't know which non-public RH servers I try to access.