"Torrez,Jon" <Jon_Torrez at securecomputing.com> writes: > DNS active-only: ENABLE DNS best-only: DISABLE DNS override: ENABLE Don't know if I understand you problem, bu you do realize that dns resolvers will cache your answers and probably apply a round-robin selection of addresses? If want to force the clients to your best site, then you need to enable "dns best-only" Bjørn