validate dnssec

6 years ago · 27432b0ddc
parent fcb6d2efb0
commit 27432b0ddc
1 changed files with 1 additions and 1 deletions
--- a/roles/install_bind/templates/named.conf.j2
+++ b/roles/install_bind/templates/named.conf.j2
@ -5,7 +5,7 @@ options {
    pid-file "/run/named/named.pid";

    dnssec-enable yes;
-    dnssec-validation yes;
+    dnssec-validation auto;

    auth-nxdomain no;    # conform to RFC1035