on further tests: how can these two statements be compatible? - in logs: 18-Dec-2009 19:39:05.103 zone c-l-i.net/IN: loaded serial 2009121801 - querying that server: $ dig c-l-i.net soa +dnssec ; <<>> DiG 9.7.0rc1 <<>> @204.62.249.36 -p 5354 c-l-i.net soa +dnssec +norecurse ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 271 ffs! Joao