ORG uses NSEC3 rather than NSEC. It would be interesting to see if you can get responses from .SE or not with the setting enabled. SE uses NSEC which has been around years longer than NSEC3. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: marka at isc.org