Hi, At Thu, 15 Jan 2009 15:10:36 +0900, Koh-ichi Ito wrote: > > I experience the following problem. > > - Query signed RR results NOERROR. > - Resign the zone on authoritative server. > - Query same RR results NOERROR. > - Invoke unbound-control flush. > - Query same RR results SERVFAIL. > - After some interval, I'm not sure but it may be $TTL of > the zone, it results NOERROR again. Excuse my bothering you, I found that resigning triggers SERVFAIL on query on other RR in same zone. For example, - Invoke unbound. - Query ns.example.jp results NOERROR. - Resign example.jp zone. - Query foo.example.jp results SERVFAIL. Regards, Koh-ichi Ito