Kevin Darcy writes: > RFC 1034 requires matching NS record sets in the parent > and the child, but this cannot be *guaranteed* In the situation under discussion, one server has both zones, so that server _can_ guarantee RFC 1034 consistency---and my server _does_. (BIND 8 also does, to some extent. BIND 9 doesn't.) Andrews says that this RFC 1034 enforcement causes problems for a system administrator who tries to violate RFC 1034. Well, that's too damn bad! The system administrator shouldn't be trying to violate RFC 1034. If the BIND company wants the RFC 1034 rule changed, they can propose that, and we'll discuss the costs and benefits. Instead they're trying to slip the change past us as a ``clarification.'' You know they're lying; why are you condoning dishonest behavior? ---D. J. Bernstein, Associate Professor, Department of Mathematics, Statistics, and Computer Science, University of Illinois at Chicago