Dag-Erling Smørgrav 058a4e3419 Prevent resolvconf from updating /etc/resolv.conf. As Jakob Schlyter ...

pointed out, having additional nameservers listed in /etc/resolv.conf
can break DNSSEC verification by providing a false positive if unbound
returns SERVFAIL due to an invalid signature.  The downside is that
the domain / search path won't get updated either, but we can live
with that.

Approved by:	re (blanket)

2013-09-23 20:06:59 +00:00

..

anchor

…

checkconf

…

control

…

daemon

…

local-setup

Prevent resolvconf from updating /etc/resolv.conf. As Jakob Schlyter

2013-09-23 20:06:59 +00:00

Makefile

Add a setup script for unbound(8) called local-unbound-setup. It

2013-09-23 04:36:51 +00:00

Makefile.inc

…