DNSSEC detects and blocks mangling, it does not bypass it. If your CPE or your ISP are lying to you, and you need to access the sites they are lying about, your only option is to use a different upstream resolver; you might also have to use a tunnel. Tony. -- f.anthony.n.finch <dot at dotat.at> http://dotat.at/ Southwest Humber, Thames: Southeasterly 5 to 7. Moderate or rough. Showers. Moderate or good.