disable dnssec in bind resolver

[Jan Buchholz]

2010/6/4 Paul Wouters <paul at xelerance.com>:
> On Fri, 4 Jun 2010, Jan Buchholz wrote:
>
>> how i can disable dnssec in the bind resolver ? My firewall don´t let
>> packets with D0 flag through. I´ve tried 'dnssec-enable no;' , but
>> this don´t fix the problem.
>
> I believe that only disables *serving* DNSSEC records.
>
> I think you want 'dnssec-validation no;'
>
> Paul
>

sorry, 'dnssec-validation no;' is already configured, because that´s
the default.

Jan