From ca030a089f9e45a5dae5f6fb5993f4cc714f1ab2 Mon Sep 17 00:00:00 2001 From: Martin Basti Date: Thu, 16 Oct 2014 16:27:00 +0200 Subject: DNSSEC: validate forwarders Tickets: https://fedorahosted.org/freeipa/ticket/3801 https://fedorahosted.org/freeipa/ticket/4417 Design: https://fedorahosted.org/bind-dyndb-ldap/wiki/BIND9/Design/DNSSEC Reviewed-By: Jan Cholasta Reviewed-By: David Kupka --- install/share/bind.named.conf.template | 1 + 1 file changed, 1 insertion(+) (limited to 'install/share') diff --git a/install/share/bind.named.conf.template b/install/share/bind.named.conf.template index 2017cb796..3c19383c0 100644 --- a/install/share/bind.named.conf.template +++ b/install/share/bind.named.conf.template @@ -18,6 +18,7 @@ options { pid-file "$NAMED_PID"; dnssec-enable yes; + dnssec-validation yes; /* Path to ISC DLV key */ bindkeys-file "$BINDKEYS_FILE"; -- cgit