# Can not get bind to resolve DNSSEC domains when DNSSEC is set to yes or auto

**URL:** <https://forums.rockylinux.org/t/can-not-get-bind-to-resolve-dnssec-domains-when-dnssec-is-set-to-yes-or-auto/17860>\
**Category:** Rocky Linux Help & Support\
**Tags:** rocky-linux-9\
**Created:** [March 11, 2025, 10:23pm UTC](https://forums.rockylinux.org/t/can-not-get-bind-to-resolve-dnssec-domains-when-dnssec-is-set-to-yes-or-auto/17860 "2025-03-11T22:23:23Z")\
**Posts on this page:** 3\
**Page:** 2

<div class="post-metadata">

**Author:** ![John316](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/john316/32/4991_2.png) [@John316](https://forums.rockylinux.org/u/John316)\
**Post date:** [March 13, 2025, 6:46pm UTC](https://forums.rockylinux.org/t/can-not-get-bind-to-resolve-dnssec-domains-when-dnssec-is-set-to-yes-or-auto/17860/23 "2025-03-13T18:46:07Z")

</div>

Main things I see different are I don’t disable any algorithms or digests and you don’t have a IPv6 zone other than the loopback.

---

<div class="post-metadata">

**Author:** ![iwalker](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/iwalker/32/2599_2.png) [@iwalker](https://forums.rockylinux.org/u/iwalker)\
**Post date:** [March 13, 2025, 6:55pm UTC](https://forums.rockylinux.org/t/can-not-get-bind-to-resolve-dnssec-domains-when-dnssec-is-set-to-yes-or-auto/17860/24 "2025-03-13T18:55:06Z")

</div>

Yep, mine is just default configuration from a Rocky 9 install, just configured a single zone to make internal queries and left it listening on localhost addresses.

---

<div class="post-metadata">

**Author:** ![John316](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/john316/32/4991_2.png) [@John316](https://forums.rockylinux.org/u/John316)\
**Post date:** [March 14, 2025, 9:01pm UTC](https://forums.rockylinux.org/t/can-not-get-bind-to-resolve-dnssec-domains-when-dnssec-is-set-to-yes-or-auto/17860/25 "2025-03-14T21:01:18Z")

</div>

I do not see a problem in my conf or zones.

I have tried -4 in the start up of named in /etc/sysconfig/named and everything you have suggested and what I have found in my searches.

I’m done for now. When bind/named updates or my ISP supports IPv6, I will try again.

[Previous page](https://forums.rockylinux.org/t/can-not-get-bind-to-resolve-dnssec-domains-when-dnssec-is-set-to-yes-or-auto/17860.md?page=1)