----- Original Message -----

From: "Tony Bunce" <tonyb@go-concepts.com>

I just disabled DNSSEC validation on all of our resolvers and that appears to have fixed the problem for us.

I’m far from a DNSSEC expert but I think the issue is with the entire 65.in-addr.arpa zone. I can reproduce the issue on any PTR record inside of 65.0.0.0/8.

And Tony wins the Internet (and that means a lot more here, than when I award it to funny people on Facebook :-) for Tuesday. Cheers, -- jra -- Jay R. Ashworth Baylink jra@baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://www.bcp38.info 2000 Land Rover DII St Petersburg FL USA BCP38: Ask For It By Name! +1 727 647 1274