You may wish to consider scrapping BIND all together and going with djbdns. It's much faster, much smaller, and far more secure. BIND is notorious for security issues and can be difficult to set up whereas djbdns is not. Check out http://www.tinydns.org for details. There are some very large sites using this because of the aforementioned reasons. Robert