bind 9.6.1-P1 named-checkconf /etc/namedb/named.conf ... ok (in global options) options { allow-recursion { mynets; } ; blackhole { !mynets; } ; }; dig'ging from a !mynets IP receives a referral to rather than time-out/silence. dig'ging from a mynets IP receives an answer. Len