Hi all, I hope this is more or less on topic ... I've been testing my zones with the tool at https://dnsflagday.net/ and getting results I don't entirely understand. I get errors from my secondary (ns2), which is a service from my VPS provider, and ok from my master (ns1), which I run myself. But apart from ns2 returning an aa flag for a failed query, I can't see any difference in the results, when I run the query manually from my desktop (having upgraded dnsutils to one that supports +nocookie) Additionally, the tool says an SOA record is returned (from the failed query), and I don't see that. Is there more detailed info somewhere? The tool does say my zone will continue to work but will have issues in the future, so I'm not immediately worried. Cheers, Richard