From 7ebc0a16e23b438fb79e981be0fda612cf17fdcb Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Fri, 4 Nov 2016 17:43:05 +0000 Subject: [PATCH] unbound: Allow list of INSECURE_ZONES being set in sysconfig A list of DNS zones can be given for which DNSSEC validation will be disabled. Signed-off-by: Michael Tremer --- src/initscripts/init.d/unbound | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/initscripts/init.d/unbound b/src/initscripts/init.d/unbound index 68c15aa40c..01a560d404 100644 --- a/src/initscripts/init.d/unbound +++ b/src/initscripts/init.d/unbound @@ -12,6 +12,7 @@ TEST_DOMAIN="ipfire.org" # This domain will never validate TEST_DOMAIN_FAIL="dnssec-failed.org" +INSECURE_ZONES= USE_FORWARDERS=1 # Cache any local zones for 60 seconds @@ -151,7 +152,7 @@ write_forward_conf() { ( config_header - local insecure_zones + local insecure_zones="${INSECURE_ZONES}" local enabled zone server remark while IFS="," read -r enabled zone server remark; do -- 2.39.2