> Also, /etc/resolv.conf lists 127.0.0.1 as the nameserver, so > as far as I understand such traffic should not be initiated > by user programs.
It sounds like named is running on your computer. Depending on your OS, netstat -anp might show you which application initiated the requests. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
