Nick Hilliard wrote: > forgot to re-sign the zone on dlv.isc.org or forgot to remove > dnssec-lookaside from the config? > > Not kidding here. People need to take responsibility for their > configurations.
Anyone running BIND provided with CentOS 6 has a release from ~2012 (bind 9.8.2) and it is understandable why their documentation is out-of-date (like OP). To get more recent bugs and fixes from ISC directly, install from ISC's copr: https://copr.fedorainfracloud.org/coprs/isc/bind-esv/ On CentOS 7 I needed to install dnf and yum-plugin-copr first. I don't see these in the usual places for CentOS 6, so getting copr sources enabled is the first challenge. ISC sources for other distros: https://www.isc.org/blogs/bind-9-packages/ Mike
