\_ That was my first thought. However, why would my firewall
\_ want to do a zone transfer if it is not running Bind
\_ at all?
\_
\_ My next thought was this: Could someone (one of my imfamous
\_ engineers) have set up an NT box that is running a nameserver?
\_ Could the request be coming from inside?
Hum, turn the flames inward and get the firewall to log the unexpected
traffic. :-) Hum, that's too generous. Put up one of the auto
security packages (names escape me at the moment) that drop routes to
offending hosts as well as putting them in hosts.deny. Then the
offending person will immediately come to you saying 'their' network
is down.
David
(text/plain)