fyi I did bring the services vm up to snuff on bind 9.7.1, the current set of iana trust anchors, and it will validate the results of recursive requests. we should be able to get the root zone anchor like next week.