diff --git a/bind-9.11-libidn2-noout.patch b/bind-9.11-libidn2-noout.patch
new file mode 100644
index 0000000..2fa3f03
--- /dev/null
+++ b/bind-9.11-libidn2-noout.patch
@@ -0,0 +1,16 @@
+diff --git a/bin/dig/dighost.c b/bin/dig/dighost.c
+index c179b62..cdf8826 100644
+--- a/bin/dig/dighost.c
++++ b/bin/dig/dighost.c
+@@ -823,11 +823,7 @@ make_empty_lookup(void) {
+ #else
+ 	looknew->idnin = ISC_FALSE;
+ #endif
+-#ifdef WITH_IDN_OUT_SUPPORT
+-	looknew->idnout = ISC_TRUE;
+-#else
+ 	looknew->idnout = ISC_FALSE;
+-#endif
+ #ifdef DIG_SIGCHASE
+ 	looknew->sigchase = ISC_FALSE;
+ #if DIG_SIGCHASE_TD
diff --git a/bind.spec b/bind.spec
index 2f16bc6..f7e3699 100644
--- a/bind.spec
+++ b/bind.spec
@@ -91,6 +91,8 @@ Patch17: bind-9.3.2b1-fix_sdb_ldap.patch
 
 # https://bugzilla.redhat.com/show_bug.cgi?id=1098783
 Patch73: bind-9.11-libidn2.patch
+# make +noidnout default
+Patch74: bind-9.11-libidn2-noout.patch
 
 
 Requires(post):   systemd
@@ -313,6 +315,7 @@ This package provides a module which allows commands to be sent to rndc directly
 %patch72 -p1 -b .64bit
 %endif
 %patch73 -p1 -b .libidn
+%patch74 -p1 -b .idn-noout
 %patch102 -p1 -b .rh452060
 %patch106 -p0 -b .rh490837
 %patch109 -p1 -b .rh478718
@@ -1026,6 +1029,7 @@ rm -rf ${RPM_BUILD_ROOT}
 %changelog
 * Tue Apr 03 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.3-3
 - Enable libidn2 support (#1098783)
+- Make +noidnout default
 
 * Wed Mar 21 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.3-2
 - Rebase to 9.11.3