strange dnssec question

Edwardo Garcia wdgarc88 at
Wed Aug 18 00:23:52 UTC 2021

Hola Mark,

Thank you, so to be clear, what is mean to delegate zone, the black zone? I
am not dns expert unfortunately

On Wed, Aug 18, 2021 at 6:23 AM Mark Andrews <marka at> wrote:

> Delegate the zone. Do NOT add a DS for it.
> --
> Mark Andrews
> On 17 Aug 2021, at 23:47, Edwardo Garcia <wdgarc88 at> wrote:
> Hola
> We have dnssec working for long time but need now to have a subdomain
> excluded, we are going to be use it to replace an internal blacklist, we
> have 14 smtp servers and it is cumbersome to keep in sync.
> So we have signed,
> but we want, and of course all addresses under, eg:
>  to work, at present of course this presents
> SERVFAIL because dnssec, obvious "black" needs to be in zone,
> nd its dns is ns999 whichwork when dnssec disabled but this is not optimum
> looking for suggestion or guidance to how we fix this please? Ir this is
> not possible?
> _______________________________________________
> Please visit to
> unsubscribe from this list
> ISC funds the development of this software with paid support
> subscriptions. Contact us at for more
> information.
> bind-users mailing list
> bind-users at
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the bind-users mailing list