On 21 May 2008, at 08:36, Stephane Bortzmeyer wrote: > The configuration: > > options { > > ... > > dnssec-enable yes; > > }; You need to add the dnssec-validation yes; option. John --- John Dickinson