* Daniel Golding: > I wouldn't rush to blame BIND for this.
Maybe the leak wasn't in the DNS service, but some other software component which company policy required on each server (think of Tivoli, antivirus software, or CSA). Who knows? The possiblities are endless.
