Or a version of unbound, depends of sleep deprivation levels...

If you use the acl and set allow, trace fails, set allow_snoop and trace works.

I seem to recall looking at what dig did during a +trace and it was doing non RD requests, it only showed up like that if you also happen to have @<IP> specified. Which while i type makes sense, because dig "Should" be acting as a recursor and doing non recursive queries.

Clearly I am rambling and in need of sleep. Sorry if you read all the way to this point:)

Paul

---