> "rndc signing -nsec3param" can change your salt. Specifying "auto" > as the salt causes named to generate a salt at random. I forgot to mention that the "auto" feature is new in 9.10, not in older versions. -- Evan Hunt -- each at isc.org Internet Systems Consortium, Inc.