MRob: > Having removed ipv6 from the question, I get the error I quoted above > even for domains that do resolve using "dig" from the CLI of the same > host. Why would there be that kind of discrepancy?
Not at all, just some intermediate resolver that messes up as I suggested in my first reply. Perhaps powerdns resolvers that assume everyone supports EDNS0, and that break all kinds of lookups. Wietse