diff options
| author |   florian <florian@openbsd.org> | 2018-03-29 20:40:22 +0000 |
|---|---|---|
| committer | florian <florian@openbsd.org> | 2018-03-29 20:40:22 +0000 |
| commit | 311db5122fde34265f4367f5026130fd5dbaa341 (patch) | |
| tree | 72d9d9ef7cf360127c16575a85dae1d0fe0605be | |
| parent | Move imxuart(4) to sys/dev/fdt so it can be shared between arm64 and armv7. (diff) | |
| download | wireguard-openbsd-311db5122fde34265f4367f5026130fd5dbaa341.tar.xz wireguard-openbsd-311db5122fde34265f4367f5026130fd5dbaa341.zip | |
Add aggressive-nsec example block.
While here, qname minimisation is an RFC since some time.
tweak & OK sthen
| -rw-r--r-- | etc/unbound.conf | 11 |
1 files changed, 8 insertions, 3 deletions
diff --git a/etc/unbound.conf b/etc/unbound.conf index 6e3d5ead53b..03eb985862e 100644 --- a/etc/unbound.conf +++ b/etc/unbound.conf @@ -1,4 +1,4 @@ -# $OpenBSD: unbound.conf,v 1.7 2016/03/30 01:41:25 sthen Exp $ +# $OpenBSD: unbound.conf,v 1.8 2018/03/29 20:40:22 florian Exp $ server: interface: 127.0.0.1 @@ -20,14 +20,19 @@ server: hide-version: yes # Uncomment to enable qname minimisation. - # https://tools.ietf.org/html/draft-ietf-dnsop-qname-minimisation-08 + # https://tools.ietf.org/html/rfc7816 # - # qname-minimisation: yes + #qname-minimisation: yes # Uncomment to enable DNSSEC validation. # #auto-trust-anchor-file: "/var/unbound/db/root.key" + # Uncomment to synthesize NXDOMAINs from DNSSEC NSEC chains + # https://tools.ietf.org/html/rfc8198 + # + #aggressive-nsec: yes + # Serve zones authoritatively from Unbound to resolver clients. # Not for external service. # |