[Pdns-users] Problem with DNSSEC from bind to powerdns

[Brian Candler]

On 18/04/2019 09:23, abubin wrote:
> However, due to DNSSEC it is not resolving the zone. It will work if I 
> disable DNSSEC in bind.

You need to create a Negative Trust Anchor in your recursor for the 
domain you are forwarding.

If you were using powerdns recursor, the instructions are here:

https://doc.powerdns.com/recursor/settings.html#forward-zones

Since you're using a bind recursor, just google for "bind negative trust 
anchor".