On 01/07/11 14:25, rams wrote: > I have trouble resolving the host name dnssecnsec3qatestdomain.com > <http://dnssecnsec3qatestdomain.com>. which is NSEC3 signed.
> This is the > parent and child zone. If I run dig ( dnssec query) with the +cd option > I which is a proper response: What version of bind are you using? My wild guess is that it's not recent enough to recognize NSEC3 signatures. Bind 9.4.3 was not, and I got exactly the same symptoms. Torinthiel _______________________________________________ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users