[Unbound-users] Exception for private domains?
wouter at NLnetLabs.nl
Fri Oct 8 11:44:23 UTC 2010
-----BEGIN PGP SIGNED MESSAGE-----
On 10/08/2010 12:43 PM, Stephane Bortzmeyer wrote:
> At work, we use a private TLD (I did not decide, don't hit me, not my
> fault, I don't speak for my employer, etc), and a validating Unbound
> resolver was able to use it with forward-zone.
> Now that the root is signed and validated, I get a SERVFAIL, probably
> because the root says NXDOMAIN.
> Is there any way to tell Unbound to bypass the validation through the
> root for a given domain?
Yes, I thought this sort of deployment could be an issue. The option:
tells unbound that this is a non-DNSSEC domain. You can have multiple
such statements in unbound.conf. (joined with trust-anchor statements,
the longest-match name applies).
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
-----END PGP SIGNATURE-----
More information about the Unbound-users