diff options
| -rw-r--r-- | Makefile | 4 | ||||
| -rw-r--r-- | unbound.conf.erb | 12 |
2 files changed, 9 insertions, 7 deletions
@@ -40,9 +40,7 @@ DN42_ZONES= \ dn42 \ d.f.ip6.arpa \ 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa \ - 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa \ - 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa \ - 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa + 23.172.in-addr.arpa 31.172.in-addr.arpa # These zones are always insecure, because they don't exist on the Internet. INSECURE_ZONES= \ diff --git a/unbound.conf.erb b/unbound.conf.erb index 3b2aedc..5fea249 100644 --- a/unbound.conf.erb +++ b/unbound.conf.erb @@ -162,10 +162,14 @@ auth-zone: <% end %> -# The DN42 root zones. +# The DN42 zones. <% dn42_zones.split.each do |zone| -%> -stub-zone: - name: <%= zone %>. - stub-addr: <%= dn42_master %> +auth-zone: + name: <%= zone %> + primary: <%= master_addr %> # <%= master %> + fallback-enabled: yes + for-downstream: no + for-upstream: yes + zonefile: <%= confdir %>/secondary/<%= zone.gsub('/', '_') %> <% end %> |