unbound: Deactivate qname-minimization & harden-below-nxdomain

[people/pmueller/ipfire-2.x.git] / config / unbound / unbound.conf

diff --git a/config/unbound/unbound.conf b/config/unbound/unbound.conf
index 3f724d8f76a81027a3a2b6542fb086a149010229..c9b01b8f47c3745545b41fc3e51d580bb8853a77 100644 (file)
--- a/config/unbound/unbound.conf
+++ b/config/unbound/unbound.conf
@@ -42,7 +42,6 @@ server:
        # Privacy Options
        hide-identity: yes
        hide-version: yes
-       qname-minimisation: yes
        minimal-responses: yes
 
        # DNSSEC
@@ -56,7 +55,6 @@ server:
        harden-short-bufsize: no
        harden-large-queries: yes
        harden-dnssec-stripped: yes
-       harden-below-nxdomain: yes
        harden-referral-path: yes
        harden-algo-downgrade: no
        use-caps-for-id: no