<div dir="ltr"><div class="gmail_default" style="font-family:tahoma,sans-serif">Hello Team;</div><div class="gmail_default" style="font-family:tahoma,sans-serif"><br></div><div class="gmail_default" style="font-family:tahoma,sans-serif">I've just finished setup for bind9.16.13 from scratch (source).  But I got error when I checked with bind function with "dig" command.   The error I got was as below.</div><div class="gmail_default" style="font-family:tahoma,sans-serif"><br></div><div class="gmail_default" style="font-family:tahoma,sans-serif">1. dig result;</div>; <<>> DiG 9.11.20-RedHat-9.11.20-5.el8_3.1 <<>><br>;; global options: +cmd<br>;; Got answer:<br>;; ->>HEADER<<- opcode: QUERY, status: <b>SERVFAIL,</b> id: 17070<br><div class="gmail_default" style="font-family:tahoma,sans-serif"><span style="font-family:Arial,Helvetica,sans-serif">;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1</span> </div><div class="gmail_default" style="font-family:tahoma,sans-serif"><br></div><div class="gmail_default" style="font-family:tahoma,sans-serif">2. named.log</div><div class="gmail_default" style="font-family:tahoma,sans-serif">There are many bad cache hit logs.</div><div class="gmail_default" style="font-family:tahoma,sans-serif">dnssec: view internal:   validating <a href="http://nikkei225jp.com/SOA">nikkei225jp.com/SOA</a>: bad cache hit (com/DS)<br></div><div class="gmail_default" style="font-family:tahoma,sans-serif"><br></div><div class="gmail_default" style="font-family:tahoma,sans-serif">I tried to dig out for this issue, I found one thing that disable dnssec-validation option.</div><div class="gmail_default" style="font-family:tahoma,sans-serif">After changing, the issue had been fixed.  However, I'm wondering if I can disable this option for security reason.  Or there is another solution??</div><div class="gmail_default" style="font-family:tahoma,sans-serif"><br></div><div class="gmail_default" style="font-family:tahoma,sans-serif">Thank you for your support!</div><div class="gmail_default" style="font-family:tahoma,sans-serif"><br></div><div class="gmail_default" style="font-family:tahoma,sans-serif">Regards,</div></div>