No obvious reason why it shouldn't work with ms-subdomain. Next step is probably a protocol trace to see what's happening on the wire. wireshark/tshark is pretty good for this kind of analysis.
Probably best to run named with -g while you're doing the trace and capture the output as well (if you're not doing that already), since there may be clues in the log that aren't obvious with your normal logging configuration. If possible, do the trace on the same machine that's running named, so that timestamps in packet trace and log will match up. _______________________________________________ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users