This does not seem to be a configuration problem to me. The extra record on the secondary is an ENT record; if you run `pdnsutil zone rectify` on your zone on the primary server, such a record will also get created. Miod