DNS dejo de funcionar

Tema: 

Estimados,

Tengo un servicio dns con named con la siguiente configuración:

options {
listen-on port 53 { 10.10.10.2; };
listen-on-v6 port 53 { ::1; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query { 10.10.10.0/26; };
recursion yes;

dnssec-enable yes;
dnssec-validation yes;
dnssec-lookaside auto;
forwarders { 200.107.10.52; 8.8.8.8; };

/* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.key";

managed-keys-directory "/var/named/dynamic";
};

Pero de un momento a otro dejo de resolver y me da este error:

May 30 09:25:41 artemis named-sdb[15033]: validating @0x7f470c500ce0: dlv.isc.org SOA: got insecure response; parent indicates it should be secure
May 30 09:25:41 artemis named-sdb[15033]: error (no valid RRSIG) resolving 'sk.dlv.isc.org/DS/IN': 200.107.10.52#53
May 30 09:25:43 artemis named-sdb[15033]: error (no valid RRSIG) resolving 'com/DS/IN': 200.107.10.52#53
May 30 09:25:43 artemis named-sdb[15033]: error (no valid RRSIG) resolving 'verisign.com/DS/IN': 200.107.10.52#53
May 30 09:25:43 artemis named-sdb[15033]: validating @0x7f470800c930: com DNSKEY: got insecure response; parent indicates it should be secure
May 30 09:25:43 artemis named-sdb[15033]: error (insecurity proof failed) resolving 'com/DNSKEY/IN': 200.107.10.52#53
May 30 09:25:43 artemis named-sdb[15033]: error (insecurity proof failed) resolving 'verisign.com/DNSKEY/IN': 200.107.10.52#53
May 30 09:25:43 artemis named-sdb[15033]: validating @0x7f46ec00a690: net SOA: got insecure response; parent indicates it should be secure
May 30 09:25:43 artemis named-sdb[15033]: error (no valid RRSIG) resolving 'edgekey.net/DS/IN': 200.107.10.52#53
May 30 09:25:44 artemis named-sdb[15033]: validating @0x7f46f40148e0: dlv.isc.org SOA: got insecure response; parent indicates it should be secure
May 30 09:25:44 artemis named-sdb[15033]: error (no valid RRSIG) resolving 'e5.sk.dlv.isc.org/DS/IN': 200.107.10.52#53
May 30 09:25:44 artemis named-sdb[15033]: error (network unreachable) resolving 'e5.sk.dlv.isc.org/DS/IN': 2001:500:60::30#53
May 30 09:25:44 artemis named-sdb[15033]: error (network unreachable) resolving 'e5.sk.dlv.isc.org/DS/IN': 2001:500:71::30#53
May 30 09:25:44 artemis named-sdb[15033]: validating @0x7f470c043e10: . NS: got insecure response; parent indicates it should be secure
May 30 09:25:44 artemis named-sdb[15033]: error (insecurity proof failed) resolving './NS/IN': 200.107.10.52#53
May 30 09:25:44 artemis named-sdb[15033]: validating @0x7f46fc01c100: dlv.isc.org SOA: got insecure response; parent indicates it should be secure
May 30 09:25:44 artemis named-sdb[15033]: validating @0x7f470402a2a0: com SOA: got insecure response; parent indicates it should be secure
May 30 09:25:44 artemis named-sdb[15033]: error (no valid RRSIG) resolving 'facebook.com/DS/IN': 200.107.10.52#53
May 30 09:25:44 artemis named-sdb[15033]: validating @0x7f470c500ce0: dlv.isc.org SOA: got insecure response; parent indicates it should be secure
May 30 09:25:44 artemis named-sdb[15033]: error (no valid RRSIG) resolving 'edgekey.net.dlv.isc.org/DS/IN': 200.107.10.52#53
May 30 09:25:44 artemis named-sdb[15033]: validating @0x7f4700005570: dlv.isc.org SOA: got insecure response; parent indicates it should be secure
May 30 09:25:44 artemis named-sdb[15033]: error (no valid RRSIG) resolving 'com.edgekey.net.dlv.isc.org/DS/IN': 200.107.10.52#53
May 30 09:25:44 artemis named-sdb[15033]: validating @0x7f46f4017900: dlv.isc.org SOA: got insecure response; parent indicates it should be secure
May 30 09:25:44 artemis named-sdb[15033]: validating @0x7f46fc01dd90: dlv.isc.org SOA: got insecure response; parent indicates it should be secure
May 30 09:25:44 artemis named-sdb[15033]: error (no valid RRSIG) resolving 'symantec.com.edgekey.net.dlv.isc.org/DS/IN': 200.107.10.52#53

Por favor si alguien se encontro con el mismo error, para solventar en este momento deshabilite:
dnssec-enable no;
dnssec-validation no;

Saludos
Roberto D.

Comentarios

q version de named tienes ??

Imagen de falcom

q version de named tienes ?? lo corres en centos 5x o 6x, te lo pregunto x q varia un poco el named.conf de centos 5x a 6x
veo q no estas haciendo un caching dns, tampoco haces recursion
allow-recursion {.....}