aboutsummaryrefslogtreecommitdiffstats
path: root/config
diff options
context:
space:
mode:
authorWarren Baker <warren@decoy.co.za>2010-12-14 19:55:31 +0200
committerWarren Baker <warren@decoy.co.za>2010-12-14 19:55:31 +0200
commit9ddca3c02919e4f9327c4a3c8a147c5c79625911 (patch)
tree6b7c35d583816859dc1c69d93f620a722297b5bf /config
parent08141a0fea4bac239515be99a49327967511d905 (diff)
downloadpfsense-packages-9ddca3c02919e4f9327c4a3c8a147c5c79625911.tar.gz
pfsense-packages-9ddca3c02919e4f9327c4a3c8a147c5c79625911.tar.bz2
pfsense-packages-9ddca3c02919e4f9327c4a3c8a147c5c79625911.zip
forward-zone: expect upstream DNS server to be authorative for everything. So in the case of a CNAME it could potentially return FAIL. Rather let Unbound do the resolving. Bump version number.
Diffstat (limited to 'config')
-rw-r--r--config/unbound/unbound.inc5
1 files changed, 3 insertions, 2 deletions
diff --git a/config/unbound/unbound.inc b/config/unbound/unbound.inc
index 3392c6a2..7f7aff78 100644
--- a/config/unbound/unbound.inc
+++ b/config/unbound/unbound.inc
@@ -565,10 +565,11 @@ function unbound_add_domain_overrides() {
$domain_entries = "";
foreach($result as $domain=>$ips) {
- $domain_entries .= "forward-zone:\n";
+ $domain_entries .= "stub-zone:\n";
$domain_entries .= "\tname: \"$domain\"\n";
foreach($ips as $ip) {
- $domain_entries .= "\tforward-addr: $ip\n";
+ $domain_entries .= "\tstub-addr: $ip\n";
+ $domain_entries .= "\tstub-prime: no\n";
}
}
return $domain_entries;