On Fri, 4 Jun 2010, Jan Buchholz wrote: > how i can disable dnssec in the bind resolver ? My firewall don´t let > packets with D0 flag through. I´ve tried 'dnssec-enable no;' , but > this don´t fix the problem. I believe that only disables *serving* DNSSEC records. I think you want 'dnssec-validation no;' Paul