<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Apparently it’s not the way to do what I needed, but I created an RPZ record like this:<div class=""><a href="http://foo.example.com" class="">foo.example.com</a><span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>NS<span class="Apple-tab-span" style="white-space:pre"> </span>ns1.example.org</div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>NS<span class="Apple-tab-span" style="white-space:pre"> </span><a href="http://ns2.example.org" class="">ns2.example.org</a></div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">My goal was to redirect queries to a load balancer serving <a href="http://foo.example.com" class="">foo.example.com</a> A records. I should have created the glue in <a href="http://example.org" class="">example.org</a> and then used RPZ to create a CNAME for <a href="http://foo.example.com" class="">foo.example.com</a> pointing to <a href="http://foo.example.org" class="">foo.example.org</a></div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">Anyway, with the NS records, I got an assertion failure:</div><div class=""><div class=""><div class="" style="margin: 0px; font-size: 11px; line-height: normal; font-family: Menlo;"><span class="" style="font-variant-ligatures: no-common-ligatures;">10-Jun-2016<span class="" style="font-variant-ligatures: no-common-ligatures; color: rgb(255, 255, 255); background-color: rgb(0, 0, 0);"> 15:49:58</span>.584 client 10.10.207.244#49952 (foo.example<a href="http://sts.austinenergy.com" class="">.com</a>): query: foo<a href="http://sts.austinenergy.com" class="">.example.com</a> IN A + (10.2.123.132)</span></div><div class="" style="margin: 0px; font-size: 11px; line-height: normal; font-family: Menlo;"><span class="" style="font-variant-ligatures: no-common-ligatures;">Jun 10 15:49:58 ns11 named[2248]: query.c:3908: REQUIRE(dbp != ((void *)0) && *dbp != ((void *)0)) failed</span></div><div class="" style="margin: 0px; font-size: 11px; line-height: normal; font-family: Menlo;"><span class="" style="font-variant-ligatures: no-common-ligatures;">Jun 10 15:49:58 ns11 named[2248]: exiting (due to assertion failure)</span></div><div class=""><span class="" style="font-variant-ligatures: no-common-ligatures;"><br class=""></span></div><div class=""><span class="" style="font-variant-ligatures: no-common-ligatures;">I’m running the supplied version of Bind from SLES 11 SP4:</span></div><div class=""><span class="" style="font-variant-ligatures: no-common-ligatures;"><div style="margin: 0px; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">someone@ns11:/var/lib/named/var/log> rpm -qi bind</span></div><div style="margin: 0px; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Name : bind Relocations: (not relocatable)</span></div><div style="margin: 0px; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Version : 9.9.6P1 Vendor: SUSE LINUX Products GmbH, Nuernberg, Germany</span></div><div style="margin: 0px; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Release : 0.25.1 Build Date: Wed 09 Mar 2016 10:22:09 AM CST</span></div><div style="margin: 0px; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Install Date: Mon 21 Mar 2016 09:31:21 AM CDT Build Host: sheep02</span></div><div style="margin: 0px; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Group : Productivity/Networking/DNS/Servers Source RPM: bind-9.9.6P1-0.25.1.src.rpm</span></div><div style="margin: 0px; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Size : 1187259 License: BSD 3-Clause; X11/MIT</span></div><div style="margin: 0px; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Signature : RSA/8, Wed 09 Mar 2016 10:23:01 AM CST, Key ID e3a5c360307e3d54</span></div><div style="margin: 0px; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Packager : <a href="https://www.suse.com/" class="">https://www.suse.com/</a></span></div><div style="margin: 0px; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">URL : <a href="http://isc.org/sw/bind/" class="">http://isc.org/sw/bind/</a></span></div><div class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><br class=""></span></div><div class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><br class=""></span></div><div class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Is this a known error?</span></div><div class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><br class=""></span></div></span></div></div></div></body></html>