Since the dig output shows "SERVFAIL" it could also be this bug: * When an outgoing request timed out, named would retry up to three times with the same server instead of trying the next available name server. This has been fixed. [GL #3637]
that was fixed in 9.18.11 (https://bind9.readthedocs.io/en/v9_18_11/notes.html#bug-fixes) -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users