Dear Maintainer, the current behavior of nptdate is sub-optimal when it is run on a mix of DNS names and IP addresses and the DNS resolver performs DNSSEC validation. I propose two alternative solutions to handle DNS errors: patch-alt1 disables further DNS lookups, but allows IP addresses to be used. patch-alt2 continues resolving in a hope to find a working server. Cheers, n-b-f