[Dnsmasq-discuss] Warning: Negative DS reply without NS record received

[Iain Hart]

Hello,

I use Pi-hole with Unbound and with DNSSEC enabled, and Pihole has been giving me these dnsmasq warnings:
"Negative DS reply without NS record received for 2.ip6.arpa, assuming non-DNSSEC domain-specific server."
"Negative DS reply without NS record received for f.ip6.arpa, assuming non-DNSSEC domain-specific server."
"Negative DS reply without NS record received for [internal LAN domain], assuming non-DNSSEC domain-specific server."
"Negative DS reply without NS record received for 9.9.in-addr.arpa, assuming non-DNSSEC domain-specific server."

I can't seem to find any documentation specific to that error message, and a query on the Pi-hole discourse site got no responses.

I have confirmed using dig and a public DNS server (8.8.8.8) that e.g. a DS query for 2.ip6.arpa returns no data, and similarly an NS query for 2.ip6.arpa returns no data, so I don't think it's my configuration. But I'm also not sure if this is actually a problem that needs a warning for these addresses? Seems like it's pretty core internet infrastructure and I'd expect if it was a problem it would have been dealt with before now.

Many thanks
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/attachments/20250828/7955a490/attachment.htm>