Turning off validation for that domain fixes the issue. When using dig to diagnose this issue, one might be tempted to use the DNSSEC switch. However, the following command:
dig eportal.incometax.gov.in. +NODNSSEC will NOT turn off DNSSEC validation. The DNSSEC switch in dig is used to display the associated DNSSEC records (if they exist). It doesn't affect validation. You must make the options change indicated by Greg Choules in his previous post to disable DNSSEC validation for a specific domain. Sorry if this is redundant or very rudimentary. Bob
-- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
