wildcard cname won't do what you expect. try an apex dname, much as was done in ISC-TN-2002-1 (see http://www.isc.org/tn/ for the list.) -- Paul Vixie