If you really want to automate then use DNS UPDATE w/ TSIG for everything in the delegation. If/when DNSSEC takes off this really is the way for key rollovers to be handled. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: marka at isc.org