Browse Source

add commented-out unbound.conf entries for dns64 (sitting in my tree and ok'd

some time ago by phessler and IIRC also mikeb), and for qname-minimisation
OPENBSD_5_9
sthen 9 years ago
parent
commit
e8c24d0335
1 changed files with 13 additions and 1 deletions
  1. +13
    -1
      src/etc/unbound.conf

+ 13
- 1
src/etc/unbound.conf View File

@ -1,4 +1,4 @@
# $OpenBSD: unbound.conf,v 1.5 2015/07/19 17:29:42 sthen Exp $
# $OpenBSD: unbound.conf,v 1.6 2015/12/15 20:26:55 sthen Exp $
server: server:
interface: 127.0.0.1 interface: 127.0.0.1
@ -14,6 +14,11 @@ server:
hide-identity: yes hide-identity: yes
hide-version: yes hide-version: yes
# Uncomment to enable qname minimisation.
# https://tools.ietf.org/html/draft-ietf-dnsop-qname-minimisation-08
#
# qname-minimisation: yes
# Uncomment to enable DNSSEC validation. # Uncomment to enable DNSSEC validation.
# #
#auto-trust-anchor-file: "/var/unbound/db/root.key" #auto-trust-anchor-file: "/var/unbound/db/root.key"
@ -37,6 +42,13 @@ server:
# #
#tcp-upstream: yes #tcp-upstream: yes
# DNS64 options, synthesizes AAAA records for hosts that don't have
# them. For use with NAT64 (PF "af-to").
#
#module-config: "dns64 validator iterator"
#dns64-prefix: 64:ff9b::/96 # well-known prefix (default)
#dns64-synthall: no
remote-control: remote-control:
control-enable: yes control-enable: yes
control-use-cert: no control-use-cert: no


Loading…
Cancel
Save