Hi, I've solved it with the help of this nice mailing list. The answer is to also have > private-domain: zone1. > private-domain: zone1.net. domain-insecure: zone1. domain-insecure: zone1.net. Nevermind, Toni