A LONG time ago an older (at the time, I think I've caught up) sysadmin told me to use "dig" to update the named.ca file. Periodically he would run dig with no arguments and compare the output to the existing /var/named/named.ca file and copy it over the old one if anything had changed. Maybe it's a bad habit, but I still do it. I haven't had any adverse issues with it for about 15 years now. Your mileage may vary! -- Jay Leafey - jay.leafey at mindless.com Memphis, TN