> I'm pretty sure that when we will start the multi forest work we will > find a couple of new funny stuff ... yep, this is why we need ACLs and proper access control. The current approach of dynamically writing out a list of bind9 ACLs to a file won't work for forests I think. Cheers, Tridge