diff options
| author | Warren Baker <warren@decoy.co.za> | 2010-12-14 19:55:31 +0200 |
|---|---|---|
| committer | Warren Baker <warren@decoy.co.za> | 2010-12-14 19:55:31 +0200 |
| commit | 9ddca3c02919e4f9327c4a3c8a147c5c79625911 (patch) | |
| tree | 6b7c35d583816859dc1c69d93f620a722297b5bf /config/unbound/unbound.inc | |
| parent | 08141a0fea4bac239515be99a49327967511d905 (diff) | |
| download | pfsense-packages-9ddca3c02919e4f9327c4a3c8a147c5c79625911.tar.gz pfsense-packages-9ddca3c02919e4f9327c4a3c8a147c5c79625911.tar.bz2 pfsense-packages-9ddca3c02919e4f9327c4a3c8a147c5c79625911.zip | |
forward-zone: expect upstream DNS server to be authorative for everything. So in the case of a CNAME it could potentially return FAIL. Rather let Unbound do the resolving. Bump version number.
Diffstat (limited to 'config/unbound/unbound.inc')
| -rw-r--r-- | config/unbound/unbound.inc | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/config/unbound/unbound.inc b/config/unbound/unbound.inc index 3392c6a2..7f7aff78 100644 --- a/config/unbound/unbound.inc +++ b/config/unbound/unbound.inc @@ -565,10 +565,11 @@ function unbound_add_domain_overrides() { $domain_entries = ""; foreach($result as $domain=>$ips) { - $domain_entries .= "forward-zone:\n"; + $domain_entries .= "stub-zone:\n"; $domain_entries .= "\tname: \"$domain\"\n"; foreach($ips as $ip) { - $domain_entries .= "\tforward-addr: $ip\n"; + $domain_entries .= "\tstub-addr: $ip\n"; + $domain_entries .= "\tstub-prime: no\n"; } } return $domain_entries; |