On 25/Mar/20 19:20, Nick Hilliard wrote: > The fix is either to remove "dnssec-lookaside auto;" from the config > or else set "dnssec-lookaside no;" and then reload named. We had issues with that feature back in 2018. We disabled it since then as a matter of course: //dnssec-lookaside auto; Mark.