>> i believe that you may relying on a behavior of a dns resolver which >> is not specified > While it might not be specified, it is being observed and therefore > an issue when we want to restrict traffic specified by hostname. i do not disagree. randy