<html><head></head><body><div style="font-family: Verdana;font-size: 12.0px;"><div>Hi,</div>
<div>I am new to both unbound and DNSSEC.</div>
<div>Trying to deploy unbound as local(127.0.0.1) recursive resolver on the CentOS 6.9 hosts.</div>
<div>These hosts are in company's internal network, with limited outbound access to internet on ports 80, 443 and 25.</div>
<div>Authoritative DNS servers for internal zone "example.local" are of type Active Directory DNS.</div>
<div>Before unbound, /etc/resolv.conf was pointing to these AD DNS servers.</div>
<div> </div>
<div>With unbound, I am now using 127.0.0.1 as my recursive resolver on CentOS hosts.</div>
<div>I configured /etc/unbound/keys.d/trusted-key.key file with keys from AD DNS.</div>
<div>I also configured /etc/unbound/conf.d/example.local.conf to forward queries for "example.local" to</div>
<div>AD DNS servers.</div>
<div> </div>
<div>With this I still have issues with respect to performing DNSSEC enabled lookups for outside hosts.</div>
<div> </div>
<div>Can some one point me in the right direction on how to implement DNSSEC in such a scenario?</div>
<div>All in all, I want to be able to utilize unbound and DNSSEC for internal AD zone and external internet lookups.</div>
<div> </div>
<div>Thank you.</div>
<div> </div>
<div> </div>
<div> </div>
<div> </div></div></body></html>