diff --git a/lib/dns/zone.c b/lib/dns/zone.c
index 25a682005d..edac498c67 100644
--- a/lib/dns/zone.c
+++ b/lib/dns/zone.c
@@ -17220,7 +17220,7 @@ receive_secure_db(void *arg) {
 		goto failure;
 	}
 
-	result = dns_db_createiterator(rawdb, 0, &dbiterator);
+	result = dns_db_createiterator(rawdb, DNS_DB_NONSEC3, &dbiterator);
 	if (result != ISC_R_SUCCESS) {
 		goto failure;
 	}