Minor, minor. Only for completeness. Made some recent movements for some items in my /etc/bind today, and since it didn't work, also checked tail /var/log/daemon.log to find about my lack of knowledge w.r.t. CN. But also, there was some "check_hints: A records for L.ROOT-SERVERS.NET class 1 do not match hint records" Obviously some time ago there was a change of IP. To update, simply # dig ns . @M.ROOT-SERVERS.NET. > /etc/bind/db.root