Maintained by: NLnet Labs

[Unbound-users] unbound has info, but does not answer it

W.C.A. Wijngaards
Tue Aug 20 15:27:32 CEST 2013


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Over,

On 08/20/2013 02:50 PM, Over Dexia wrote:
> Am 20.08.2013 14:20, schrieb W.C.A. Wijngaards: Since I need the
> unbound to serve information (gathered from internal servers) even
> when the internet is unavailable, I probably have to disable
> DNSSEC.

For this you should create lines for your localdomain(s):
domain-insecure: "local"

So that unbound does not have to go to the internet for dnssec for
your local domains, and then when internet is not available it does
not try to setup the chain of trust.  It then uses DNSSEC for the
internet, but does not use DNSSEC for "local" names.

> This solved my problem. Thanks a lot for your help and best
> regards, jo

:-)

Best regards,
   Wouter

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=7+Db
-----END PGP SIGNATURE-----