Hi, OpenSSH-6.0 will be out soon [1] and introduces support for ldns [2], a DNSSEC-compliant resolver library providing features similar to dnsutils. To integrate this in our packages, I plan to: - put a new package in [core] called dnssec-anchors; - make dnsutils and ldns depend on dnssec-anchors; - move ldns from [community] to [core]; - make openssh depend on ldns. You can check those packages out in my repo [3]. Comments are welcome. In my opinion, ldns and sister projects unbound [4] and nsd [5] are great steps forward sane mainstream DNS software, and I am glad to see OpenSSH agree. If you are presently using BIND, I strongly recommend you consider switching to them. Cheers. [1] http://lists.mindrot.org/pipermail/openssh-unix-dev/2012-February/030224.htm... [2] http://nlnetlabs.nl/projects/ldns/ [3] http://arch.vesath.org/all/ [4] http://unbound.net/ [5] http://www.nlnetlabs.nl/projects/nsd/ -- Gaetan