jg tells me the test-ipv6.com site fails with dnssec and enabled on native ipv6. disabling dnssec works. anyone can confirm? get a log/packet capture? -- Dave Täht