> Like you say, this isn't a NetBSD problem. The approach in > https://lists.freebsd.org/pipermail/freebsd-stable/2016-June/084771.html > looks reasonable at first glance as an option to not hard-code IP > addresses anywhere: > > running this at boot time may help as well > > unbound-control set_option val-permissive-mode: yes > > then after ntpd has started up run this > > unbound-control set_option val-permissive-mode: no > > Yes work around's, but work around's work by definition. > > The thread from that link has a few other suggestions, but this one > seemed most elegant (insofar as a workaround could be considered > elegant).
And ... if you're using BIND, it seems that a temporary "rndc validation off" is the workaround available by using rndc. Regards, - Håvard
