A. Schulze via Unbound-users <unbound-users at unbound.net> wrote: > But other people report they get NXDOMAIN and not SERVFAIL like I do. > (https://mail.sys4.de/mailman/private/dane-users/2016-February/thread.html) > > So I like to ask if unbound may behave different then bind. Yes, dig _25._tcp.mailrelay2.bonn.postbank.de. tlsa works for me with BIND. However dig +dnssec *.postbank.de. fails, so as you say, all is not well. Tony. -- f.anthony.n.finch <dot at dotat.at> http://dotat.at/ Hebrides, Bailey: Westerly 7 to severe gale 9 at first in south, otherwise cyclonic becoming northerly 5 to 7. Very high, becoming very rough or high. Rain, then wintry showers. Moderate, occasionally poor.