As I was asked... The validation for incoming queries of b10-resolver is implemented in src/bin/resolver/resolver.cc:Resolver::processMessage(), which is mostly a copy of the corresponding code of b10-auth. --- JINMEI, Tatuya