From 2b973889b37b4df33ce25cafa96a3322889432ac Mon Sep 17 00:00:00 2001 From: Pieter Lexis Date: Tue, 8 Mar 2016 21:06:27 +0100 Subject: [PATCH] Recursor: disable dnssec in the default config This will be set to process after the dnssec implementation is more bug-free. --- docs/markdown/recursor/settings.md | 2 +- pdns/pdns_recursor.cc | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/markdown/recursor/settings.md b/docs/markdown/recursor/settings.md index 51e4b5ed7a..0b573a55fd 100644 --- a/docs/markdown/recursor/settings.md +++ b/docs/markdown/recursor/settings.md @@ -169,7 +169,7 @@ cached. ## `dnssec` * One of `off`, `process`, `log-fail`, `validate`, String -* Default: `process` +* Default: `off` (**note**: was `process` until 4.0.0-alpha2) * Available since: 4.0.0 Set the mode for DNSSEC processing: diff --git a/pdns/pdns_recursor.cc b/pdns/pdns_recursor.cc index 929d54209d..ccc45a1690 100644 --- a/pdns/pdns_recursor.cc +++ b/pdns/pdns_recursor.cc @@ -2624,7 +2624,7 @@ int main(int argc, char **argv) ::arg().set("local-address","IP addresses to listen on, separated by spaces or commas. Also accepts ports.")="127.0.0.1"; ::arg().setSwitch("non-local-bind", "Enable binding to non-local addresses by using FREEBIND / BINDANY socket options")="no"; ::arg().set("trace","if we should output heaps of logging. set to 'fail' to only log failing domains")="off"; - ::arg().set("dnssec", "DNSSEC mode: off/process (default)/log-fail/validate")="process"; + ::arg().set("dnssec", "DNSSEC mode: off (default)/process/log-fail/validate")="off"; ::arg().set("daemon","Operate as a daemon")="no"; ::arg().setSwitch("write-pid","Write a PID file")="yes"; ::arg().set("loglevel","Amount of logging. Higher is more. Do not set below 3")="4"; -- 2.47.2