This blocking talk actually brings me to something else: Would it be easy
(and a need) to do some DNS Injection on m0n0wall by default for all
Verisign Wildchard answers?
I think about an option which can be enabled/disabled which listens for
all DNS traffic and removes/overwrites/replaces answers for verisigns
wildchard search page.
Just a quick thought...