iterate: allow lame negative answers in PERMISSIVE mode
Some nameservers are hopelessly broken (ns1-ord.salesforce.com), and will return lame negative answers which will flag the nameserver as bad, so it wouldn't be picked for valid queries.
Some nameservers are hopelessly broken (ns1-ord.salesforce.com), and will return lame negative answers which will flag the nameserver as bad, so it wouldn't be picked for valid queries.