Leen Besselink wrote: > If you take tcpdump, you'll see it does this at startup and those > 'random'-hostnames will remain to be queried (probably to check if a > dns resolver is still responding ?): it's to detect NXDOMAIN rewriting. https://isc.sans.edu/diary.html?storyid=10312 -- Robert Edmonds edmonds at debian.org