Weirdly enough, it tries to do a reverse lookup on the name server when invoking NSLOOKUP. Steve D's MWATCH (MULTINET Tunnel updater) uses NSLOOKUP to figure out the new IP address for the tunnel. As I don't need the internal name server on GORVAX, I just set the name server to 8.8.8.8 and everything works. Sampsa On 23 Dec 2012, at 20:17, Dave McGuire <mcguire at neurotica.com> wrote: On 12/23/2012 11:20 AM, sampsa at mac.com wrote: Any Bind gurus out here? Can you contact me off list, having problem with reverse zones... I can help you with BIND, but I don't see how Multinet could be borked due to a borked BIND config. -Dave -- Dave McGuire, AK4HZ New Kensington, PA