On 3/25/06, Les Mikesell <lesmikesell@xxxxxxxxx> wrote: > If you insist on having recursion off on the public servers > configured as primary and secondaries for your domains (and > it doesn't make sense elsewhere), the easy fix is to run other > DNS servers configured normally to do your own lookups and use > the /etc/resolv.conf entries on your sendmail servers to use > them - as you'll need to do for everything else that wants a > DNS server. Your own lookups are controlled entirely by the > resolv.conf entries and can be on other machines whether or not > you run an instance of named on the local machine. Recommended reading -> http://www.cymru.com/Documents/secure-bind-template.html -- "They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety'' Benjamin Franklin 1775