core1.nanog(config)# no ip pointless-debating Might I suggest that this whole BIND/djbdns/ISC thread is old, and should either 1) be taken privately, off list 2) be taken to a trashy mail list where people bicker about stupid things like this (no names mentioned but it sounds like "eyenet axis") or 3) be dropped alltogether. jamie -- i am jamie at arpa dot com .. and this is my .sig. core1.dns.microsoft.com# sho access-list 101 Extended IP access list 101 deny udp any any eq domain (874572345872345 matches)