BIND log question

Hi, I saw what in BIND logs, transfer of 'zone.name/IN' from 106.185.xx.xx#53: Transfer completed: 0 messages, 1 records, 0 bytes, 0.367 secs (0 bytes/sec) what does it mean: 0 messages, 1 records? what's the 1 records? Thanks. ___ Please visit htt

ZSKs sign some RRsets but not others

A newly minted ZSK signs a domain's SOA but not its A or MX records. What basic config step did I miss? For the domain 'trikids123.com' I created and installed a new ZSK with a key ID of 28053 using these commands: dnssec-keygen -a 8 -b 1024 trikids123.com chown bind:bind * # this is bind910 on

Re: ZSKs sign some RRsets but not others

Nothing wrong here. The A RRset will be signed with the new key when it falls due for re-signing as there is a existing RRSIG using algorithm 8. The SOA was signed as the DNSKEY was added which required the SOA to be updated as well. You can force named to re-sign all the RRsets but there is no