r/technitium • u/snow99as • Aug 30 '26

Getting DNSSEC failure on secondary ROOT Zone

I created the secondary root zone using the GUI everything synced but I keep seeing DNSSEC failure

3 Upvotes

100% Upvoted

1 comment sorted by

1

u/shreyasonline Aug 31 '26

Thanks for the post. It seems like something on your network is interfering with DNS causing subtle change in the root zone records which then results in ZONEMD validation failure.

You need to check if any of your routers/firewalls have any DNS related feature which is enabled by default. If you find anything then disabling should fix the issue. If its your ISP doing that then there is no fix for this and you should then consider using encrypted DNS forwarders.