Enable DNSsec on our secondaries

diff --git a/modules/named/files/common/named.conf.options b/modules/named/files/common/named.conf.options
index b81be8c..8d81ba4 100644 (file)
--- a/modules/named/files/common/named.conf.options
+++ b/modules/named/files/common/named.conf.options
@@ -26,6 +26,9 @@ options {
         allow-transfer { none; };
         allow-recursion { Nagios; };
         blackhole { 192.168.0.0/16; 10.0.0.0/8; 172.16.0.0/12; };
+
+       dnssec-enable yes;
+       dnssec-validation yes;
 };
 
 logging {