migration from pre bind 8 to v8 or greater.

[Bri-]

Another note to Kevin and even Mark on firewalls, you should never rely on
it soley to protect your network and should have it in a DMZ of some kind.
A multi-tierd approach reduces dependancy, single points of failure and
increases reliability.

This way, a secure DNS combined with secured stations and a secured router,
etc...give you a pretty good setup.

Bri-
PS Another thing to consider is the use of a "honey pot" to further secure
your perimeter.