diff options
| author | Lexi Winter <lexi@le-fay.org> | 2025-06-10 14:28:28 +0100 |
|---|---|---|
| committer | Lexi Winter <lexi@le-fay.org> | 2025-06-10 14:28:28 +0100 |
| commit | 3e4469bb298749487c87dd4d40bcc6c4eaf1c9a0 (patch) | |
| tree | 35fc548a47eb6501b1074bc8170bdbe8cdbfb834 /unbound.conf.erb | |
| parent | cc0b5d5b2e25223b9b4577c85ab9445f39500cbd (diff) | |
| download | dns-3e4469bb298749487c87dd4d40bcc6c4eaf1c9a0.tar.gz dns-3e4469bb298749487c87dd4d40bcc6c4eaf1c9a0.tar.bz2 | |
always make 18.198.in-addr.arpa insecure
Diffstat (limited to 'unbound.conf.erb')
| -rw-r--r-- | unbound.conf.erb | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/unbound.conf.erb b/unbound.conf.erb index 4755c83..1490c41 100644 --- a/unbound.conf.erb +++ b/unbound.conf.erb @@ -96,6 +96,11 @@ server: <% end -%> <% end -%> +# Zones which are always insecure, because they don't exist on the Internet. +<% insecure_zones.split.each do |zone| -%> + domain-insecure: <%= zone %> +<% end -%> + # DN42 zones. These don't need to be private, but should be insecure for now. # Ideally we'd have a way to validate these properly. <% dn42_zones.split.each do |zone| %> |