Skip DNSSEC records reported by dnscontrol

services/analyzer.go

@@ -178,6 +178,9 @@ func AnalyzeZone(origin string, zone []dns.RR) (svcs map[string][]*happydns.Serv
 		if utils.IsDNSSECType(record.Header().Rrtype) {
 			continue
 		}
+		if record.Header().Name == "__dnssec."+origin && record.Header().Rrtype == dns.TypeTXT {
+			continue
+		}
 
 		domain := strings.TrimSuffix(strings.TrimSuffix(record.Header().Name, "."+a.origin), a.origin)
 

services/txt.go

@@ -66,6 +66,11 @@ func (ss *TXT) GenRRs(domain string, ttl uint32, origin string) (rrs []dns.RR) {
 
 func txt_analyze(a *Analyzer) (err error) {
 	for _, record := range a.SearchRR(AnalyzerRecordFilter{Type: dns.TypeTXT}) {
+		// Skip DNSSEC record added by dnscontrol
+		if strings.HasPrefix(record.Header().Name, "__dnssec.") {
+			continue
+		}
+
 		if txt, ok := record.(*dns.TXT); ok {
 			err = a.UseRR(
 				record,