# # http://www.isc.org/products/BIND/bind-security.html http://packetstorm.securify.com/UNIX/IDS # http://www.menandmice.com/docs/named_messages.htm # www.acmebw.com/cats.htm Ask Mr.DNS # http://www.crazysquirrel.com/linux/dns.php # http://britannia.ddo.jp/linux/bind9.html http://www.shidarezakura.com/ms/m003.html - internal vs external http://mland98.rc.kyushu-u.ac.jp/memo/bind9.html http://www.fujie.jp/linux/linux_dns.html # # # # 1) it should be "IN-ADDR.ARPA" (missing the "R" in "ADDR") 2) hostnames in the 0.0.127.IN-ADDR.ARPA SOA should be FULLY qualified (i.e., "hostname.site.net.") otherwise a host name will be interpreted relative to the assumed ORIGIN (0.0.127.IN-ADDR.ARPA) so that it will become "hostname.0.0.127.IN-ADDR.ARPA". In short, your NS record: IN NS ns ;WRONG! IN NS 10.1.2.3 ;RIGHT! IN NS ns.site.net. ;RIGHT! # # # end of file