Ray Van Dolson wrote: > 1.8GB's of these seems incredibly excessive... I wonder if they're not > legitimate DNS requests trying to get to you because you're the SOA for > some domain... > I've seen this sort of behavior from broken resolvers trying to follow a fully-lame delegation. If you suspect that could be it, try a dns report of the domain being queried. http://member.dnsstuff.com/pages/dnsreport.php -- Said one park ranger, 'There is considerable overlap between the intelligence of the smartest bears and the dumbest tourists.' Mark D. Foster, CISSP <mark at foster.cc> http://mark.foster.cc/