diff --git a/lib/dns/zone.c b/lib/dns/zone.c
index e120dded9e..257f26780c 100644
--- a/lib/dns/zone.c
+++ b/lib/dns/zone.c
@@ -14986,6 +14986,8 @@ copy_non_dnssec_records(dns_db_t *db, dns_db_t *version, dns_db_t *rawdb,
 		return (ISC_R_SUCCESS);
 	}
 
+	dns_dbiterator_pause(dbiterator);
+
 	result = dns_db_findnode(db, name, true, &node);
 	if (result != ISC_R_SUCCESS) {
 		goto cleanup;