Strange behaviour with DNSSec

[bsd]

Hello, 


I am running an important subzone of .museum zone (which implements both DNSSec and IDN) and I have a strange behavior going on… 

Some requests seems not to be resolved correctly with certain operators… 
One out of six requests are not resolved correctly. 

Instead of giving the answer of the request, It returns the SOA record… 


I use to run the latest bind 9.5.x branch. 
I have moved this morning to 9.7.x branch… hopping this might help solving my problem. 


Any idea how to test / investigate that further… 


Sincerely yours. 

¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Gregober ---> PGP ID --> 0x1BA3C2FD
bsd @at@ todoo.biz
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯

P "Please consider your environmental responsibility before printing this e-mail"