> For now, it is returning the same IP address, but I have no trouble > imagining Verisign evading DNS filters by changing the A records every > now and then. Any solution to prevent Verisigns greed should keep this > in mind.
>From what I understand, BIND's approach is much more sophisticated than a hardcoded (or configured) IP address. AFAIK, it looks up the wildcard TLD ip addresses and uses that to filter...so if the address should change, it will automatically change BIND's filter settings. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
