>Or (on 9.11 and later) use dnstap, which should be a good deal faster. Dear Tony, thank you. It seems like a "bridge" that permit resolved IP logging. Do you also know if it can slow down performances or it is fully transparent? Thank you again! F