Robert Edmonds <[email protected]> wrote: > Chuck Anderson wrote: > > 2. Use a local DNS daemon on every server with forwarders configured > > to the network's nameservers, and fix resolv.conf to 127.0.0.1. > > I'll shamelessly admit that I do this on all my Debian systems, where > "apt-get install unbound resolvconf" results in exactly that > configuration. > Does this result in a DNSSEC-validating resolver, as well?
If so, then Chuck's problem is actually a solved one, and his request (as mine would be) is that the Linux distributions make this default, so long as the setting of one or more recursive resolvers was easy. Of course, in an environment where DNS queries have not been restricted, this setup should run standalone, resolving DNS queries from the root. > > -- > Robert Edmonds > _______________________________________________ > dns-operations mailing list > [email protected] > https://lists.dns-oarc.net/mailman/listinfo/dns-operations > dns-jobs mailing list > https://lists.dns-oarc.net/mailman/listinfo/dns-jobs > -- Jonathan
_______________________________________________ dns-operations mailing list [email protected] https://lists.dns-oarc.net/mailman/listinfo/dns-operations dns-jobs mailing list https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
