From 513e0772e7aec8c9f99977365ce3c5f8a426544e Mon Sep 17 00:00:00 2001 From: Thom Pol Date: Sat, 26 Feb 2022 18:25:17 +0100 Subject: [PATCH 1/2] Remove obsolete dnssec-enable option (#5928) --- install/tpl/named.conf.options.master | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/install/tpl/named.conf.options.master b/install/tpl/named.conf.options.master index 4f001960bf..ebae9af395 100644 --- a/install/tpl/named.conf.options.master +++ b/install/tpl/named.conf.options.master @@ -18,11 +18,10 @@ options { // If BIND logs error messages about the root key being expired, // you will need to update your keys. See https://www.isc.org/bind-keys //======================================================================== - dnssec-enable yes; dnssec-validation yes; version "unknown"; - + allow-transfer {none;}; auth-nxdomain no; # conform to RFC1035 -- GitLab From 19753000f4d9086d13fd043363f4df35968d07ff Mon Sep 17 00:00:00 2001 From: Thom Pol Date: Sat, 26 Feb 2022 18:26:12 +0100 Subject: [PATCH 2/2] Remove option dnssec-validation as the default (auto) is the correct setting (#5928) --- install/tpl/named.conf.options.master | 1 - 1 file changed, 1 deletion(-) diff --git a/install/tpl/named.conf.options.master b/install/tpl/named.conf.options.master index ebae9af395..588488c181 100644 --- a/install/tpl/named.conf.options.master +++ b/install/tpl/named.conf.options.master @@ -18,7 +18,6 @@ options { // If BIND logs error messages about the root key being expired, // you will need to update your keys. See https://www.isc.org/bind-keys //======================================================================== - dnssec-validation yes; version "unknown"; -- GitLab