Without knowing more about exactly what is involved, the one thing that leaps to mind is that folks should look at "restrict default noquery" with appropriate per-host or per-network overrides. -- Harlan Stenn <stenn at ntp.org> http://networktimefoundation.org - be a member!