DNSsec from domailcontrol.com

Fri Jun 18 11:34:57 UTC 2010

Hi

We (a small ISP in the middle of nowhere) are having problems
resolving DNSsec records from godaddy.

This commands works just fine
# dig @ns52.domaincontrol.com loomus.com

but this doesn't
# dig @ns52.domaincontrol.com +dnssec loomus.com
We don't receive the reply to the query.

and no, this isn't a packet size issue, the reply for the second
command is 124bytes, and the host isn't behind a firewall.

So the same commands work just fine outside our network, and we are
only having problems with nsxx.domailcontrol.com
As far as I can see, when enabling +dnssec the EDNS option is
activated and this is added in the dns querty "OPT UDPsize=4096 OK"

I have also tried
# dig @ns52.domaincontrol.com +dnssec +bufsize=512 loomus.com
without any success.

Does someone have any brilliant suggestions?
Please contact me on or off list

Regards
MKS