We tried to check aa for just this reason but there are to many broken authoritative servers which just don't set "aa=1" on all the servers for the zone that we had to back the code change out.
I would just use a server clause to mark nameserver as bogus. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users