[dns-operations] More dnssec issues with .gov?

[Stephane Bortzmeyer]

On Tue, May 05, 2009 at 10:43:29AM -0700,
 Craig Leres <leres at ee.lbl.gov> wrote 
 a message of 17 lines which said:

> Am I the only one who is seeing this?


Apparently same problem for me. BIND 9.5.1. DLV at ISC Restarting BIND
does not seem to cure. Resolution seems OK through Unbound (same DLV).


; <<>> DiG 9.5.1-P1 <<>> +dnssec @127.0.0.1 SOA cz.
; (1 server found)
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 50632
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 7, ADDITIONAL: 19

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;cz.				IN	SOA

;; ANSWER SECTION:
cz.			3600	IN	SOA	a.ns.nic.cz. hostmaster.nic.cz. 1241546635 900 300 
604800 900




; <<>> DiG 9.5.1-P1 <<>> +dnssec @127.0.0.1 SOA gov.
; (1 server found)
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 65127
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;gov.				IN	SOA