roles/dnsserver: set unbound's dnssec-permissive mode

Signed-off-by: John Helmert III <[email protected]>
ajakk · Dec 7, 2023 · e054e38 · e054e38
1 parent d75747a
commit e054e38
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/roles/dnsserver/templates/unbound.conf.j2 b/roles/dnsserver/templates/unbound.conf.j2
@@ -589,7 +589,7 @@ server:
         # instead of SERVFAIL. It still performs the security checks, which
         # result in interesting log files and possibly the AD bit in
         # replies if the message is found secure. The default is off.
-        # val-permissive-mode: no
+        val-permissive-mode: yes
 
         # Ignore the CD flag in incoming queries and refuse them bogus data.
         # Enable it if the only clients of Unbound are legacy servers (w2008)