BIND 9.2.2-P1 can block sitefinder.

BIND 9.2.2-p1 now supports tagging zones as “delegation-only”. This can be used to filter out “wildcard” or “synthesized” data from NAT boxes or from authoritative name servers whose undelegated (in-zone) data is of no interest.This effectively means that sitefinder-type records can now be blocked in ISPs’ name servers.