JC_Denton: unfortunately, dns providers tend to get ddos'd which is why i've shy'd away from it :( mhoran: how has your he.net dns experience been? i just started using it and it seems solid No problems in years. excellent to hear couldn't find an easy way to allow axfr so i can have a non-he.net slave, but i probably didn't look deep enough I just gave he.net slave from me. mhoran: Really, you weren't affected by that nasty HE DNS outage last year? :P https://wordtothewise.com/2016/03/he-net-dns-problems/ I'm still fairly happy with them as well, but that incident prompted me to move all my DNS to Cloudflare. Returning a "yep nothing's wrong and your query just has no result" response was extraordinarily rage-inducing. Either be "down" or work properly, do NOT lie to clients. Other than that incident, I've been a happy dns.he.net user and some of my clients are still using them. Not that I'm aware of Really? Wow. That lasted over a day. That's what she said!! (A weekday no less.) Guess my cache time is high enough and it didn't affect the services I use? I've an external MX in front of my own, so I didn't lose any mail. buZz: I used he.net DNS for years. after that incident, I moved to route53. err, ignore the "buzz" part :P Strange. The SSH connection I left open is still connected, but I cannot even ping the IP -- even from the same laptop with the SSH connection. Nothing at all in the pflog, nothing surprising in netstat (though obviously a shorter list of connections than normal). Guess I'll reboot and hope for the best. ARP Thunder as low 40 bucks for a month. That is good.