Sorry, I did a "silly" in the example subnet. On 10/9/07, Brendan Oakley wrote: > zone "secretsubnet.mydomain.com" in { > type master; > file "/var/named/secretsubnet.mydomain.com"; > allow-query { > 123.456.789.0/24; > 10.0.0.0/8; > }; > }; 123.45.67.0/24 would be better. Brendan