DNS troubleshoot

BIND named: error (no valid RRSIG) resolving

 

Bringing up named on CentOS 6.5 the default configuration of named.conf had
dnssec turned on and caused errors:

May 20 16:52:25 molokai named[30299]: error (no valid RRSIG) resolving ‘facebook.com/DS/IN’: 208.59.247.45#53
May 20 16:52:25 molokai named[30299]: error (no valid RRSIG) resolving ‘facebook.com/DS/IN’: 208.59.247.46#53

The Solution was to turn off dnssec off in the /etc/named.conf
changed:
dnssec-enable yes;
dnssec-validation yes;
to:
dnssec-enable no;
dnssec-validation no;