Ian Watts wrote: > > Okay, it turns out that this problem arises when the AD servers do a > lookup for an IP address where the ARPA zone has a CNAME for an NS > record. well that's the problem; an NS record can't point to a CNAME. w -- GPG Public Key: http://infinitejazz.net/will/pgp/