>>> I thought that MS (NT 4.0 and later I think) will put a "." at the end of each unqualified multi label query. No, I think you have it backward. Nslookup does not append a ".", it expects one, such that if there is no ".", nslookup then appends the entire domain suffix configured in TCP/IP. If there is no suffix configured and DNS could not locate the record you've requested, it tends to then append the wildcarded domain name in the lookup. I think we need to clarify your "unqualified multi label". If it's multi-labeled, it is qualified. If it has a ".", it is qualified. Now, nslookup considers a qualified (1.2.3) to be NOT FULLY QUALIFIED because there is no "." at the end of "3" (like so, 1.2.3.), so I am not sure if that's that you also refer to as "unqualified". It is important that you know that this is an NSLOOKUP bug, and this bug tends to manifest itself WHEN YOU HAVE A WILD-CARDED ZONE IN YOUR DNS. Do you see the correlation I am trying to point out? Sincerely,
Dèjì Akómöláfé, MCSE+M MCSA+M MCP+I Microsoft MVP - Directory Services www.readymaids.com - we know IT www.akomolafe.com Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon ________________________________ From: [EMAIL PROTECTED] on behalf of Mike Newell Sent: Fri 5/27/2005 8:25 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Catch all DNS record Thanks Deji, Awesome, thanks for the reply. Everything makes sense except the part about query for domain other than my innternal domain, will resolve to the Wildcard. I thought that MS (NT 4.0 and later I think) will put a "." at the end of each unqualified multi label query. Also, I was under the impression that MS will only append the suffix if it's an unqualified single label query. I'm not second guessing here, I just want to make sure I'm understanding this before I decide to allow the wildcard or not. Again, thanks for the reply and the detailed info. Mike. List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/