Hi Philip. I echo Fred's response; why forward? - Backup your config - remove/comment the "forwarders {}" statement - start a tcpdump to disc for port 53 (for evidence about what happens next) - stop/start 'named'. - try queries/look in the log/stop the tcpdump and analyse it in Wireshark.
As an aside, you don't need zone "." for either of two reasons: 1) If you're global forwarding the hint zone will never get used anyway. 2) If you're not forwarding, BIND has the list of root servers built in, so defining a hint zone yourself is pointless, unless you deliberately want to use a different set of roots (e.g. a private network, GRX or similar) Cheers, Greg
-- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users