Sami, After you regenerate your rndc key as Mark advised, you will need to provide us with more information, as what you've sent is not sufficient to troubleshoot your symptom. As a first step, take a packet capture on the resolver that shows incoming queries from the client and the corresponding outgoing queries from the resolver to upstream servers. When you capture packets, do not filter out TCP or ICMP or ARP. A tcpdump filter such as 'icmp or arp or port 53' should be sufficient. I would capture on all interfaces of the server (-i any).
Send that capture file along with the BIND log segment which contains the failed queries. Michael Batchelder ISC Support
-- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
