After I sent the other mail, he added this: [0:30] <pWr> I'm not sure.. what I'm talking about isn't a BIND problem, it's just a weakness in the DNS protocol, period. theres nothing that can stop it except the next-generation protocol(DNSSEC, cryptographicly signed packets)