get rid of broken nameservers

[mirror/dsa-puppet.git] / modules / unbound / templates / unbound.conf.erb

diff --git a/modules/unbound/templates/unbound.conf.erb b/modules/unbound/templates/unbound.conf.erb
index 0546980..fe710ea 100644 (file)
--- a/modules/unbound/templates/unbound.conf.erb
+++ b/modules/unbound/templates/unbound.conf.erb
@@ -44,7 +44,7 @@ server:
        auto-trust-anchor-file: "/var/lib/unbound/root.key"
        auto-trust-anchor-file: "/var/lib/unbound/debian.org.key"
 
-<% if not @is_recursor and not @dodgy_ns -%>
+<% if (not @is_recursor) and @ns -%>
 forward-zone:
        name: "."
 <% @ns.to_a.flatten.each do |nms| -%>