Hello. I have the same behaviour with a DNSSEC signed zone :
dnssec-signzone: error: dns_master_load: si7v.fr.zone.zs:17: si2013040507v.fr: not at top of zone I think that zonesigner replaces numbers from records which contains a number with a serial. I build dnssec-tools 2.0 from upstream and there is no problem. Best regards, Pierre Tourbeaux -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org