http://isc.sans.edu/diary/Odd+DNS+replies+from+10+nets+and+RFC1323+impacting+firewalls/13216 The text is difficult to understand (how can he says that packets come from the DNS root name servers if the source IP address is in 10.0.0.0/8?). Anyone has an idea?