> For a small home or office network the above is severe overkill and I'd
True, which is why I didn't run it, but installed it when Verisign broke the internet because there's an "Anti-Verislime"-patch available for it, which turns unknown domains back into "unknown". It works reasonably well. Although Verisign has had that stopped in the mean time, there's no doubt they're just sitting back thinking about how they can do the same thing again without being kicked by ICANN, so it might still prove useful. Volker -- Volker Kuhlmann is possibly list0570 with the domain in header http://volker.dnsalias.net/ Please do not CC list postings to me.