I realize this thread had gotten long, but thought I'd pitch the following idea: ; TLD $ORIGIN com. * IN NS ns.wildcard.invalid. $ORIGIN wildcard.invalid. ns IN A 1.2.3.4 ; NSI default Make no mistake, I'd much rather have the wildcard eradicated. Until that happens (who says I'm not a foolish optimist?), the above would allow NetSol to run SiteFinder _and_ make it easier for providers to override via a single zone. People have expressed concern over NetSol circumventing current resolver patches using glue. They could employ the same tactics to simplify the sifting. Eddy -- Brotsman & Dreger, Inc. - EverQuick Internet Division Bandwidth, consulting, e-commerce, hosting, and network building Phone: +1 785 865 5885 Lawrence and [inter]national Phone: +1 316 794 8922 Wichita _________________________________________________________________ DO NOT send mail to the following addresses : blacklist@brics.com -or- alfra@intc.net -or- curbjmp@intc.net Sending mail to spambait addresses is a great way to get blocked.