diff -up bind-9.3.6-P1/lib/dns/validator.c.rh643012 bind-9.3.6-P1/lib/dns/validator.c --- bind-9.3.6-P1/lib/dns/validator.c.rh643012 2010-10-14 15:11:52.303637965 +0200 +++ bind-9.3.6-P1/lib/dns/validator.c 2010-10-14 15:12:05.943632276 +0200 @@ -2248,7 +2248,7 @@ nsecvalidate(dns_validator_t *val, isc_b return (ISC_R_SUCCESS); } - if (val->authcount == val->authfail) + if (val->authfail != 0 && val->authcount == val->authfail) return (DNS_R_BROKENCHAIN); validator_log(val, ISC_LOG_DEBUG(3), "nonexistence proof(s) not found");