From: Peter Palfrader <peter@palfrader.org>
Date: Sat, 20 Apr 2013 10:36:57 +0000 (+0200)
Subject: By default unbound answers queries for ASN112 networks on its own.  Teach it to behave.
X-Git-Url: https://git.adam-barratt.org.uk/?a=commitdiff_plain;h=8dd7b4e63c9b1a28a93d6850a29cc25c69e27531;hp=146cc9cdb25153a49c3923710ca598bd939328b4;p=mirror%2Fdsa-puppet.git

By default unbound answers queries for ASN112 networks on its own.  Teach it to behave.
---

diff --git a/modules/unbound/templates/unbound.conf.erb b/modules/unbound/templates/unbound.conf.erb
index a8001903e..e8e8b581b 100644
--- a/modules/unbound/templates/unbound.conf.erb
+++ b/modules/unbound/templates/unbound.conf.erb
@@ -54,6 +54,7 @@ forward-zone:
 # XXX : we probably ought to forward 172.29 reverse queries to our nameserver
 # if our forwarders are not ours.
 <% else -%>
+local-zone: "29.172.in-addr.arpa" nodefault
 forward-zone:
 	name: "29.172.in-addr.arpa"
 	forward-host: ns1.debian.org