> "A server MUST not set the AD bit unless it knows that a secure > transport is in use between it and the requesting client." and the way the dns application tells that ipsec is established between it and the client is ...? randy