Remove or remark dnssec-lookaside 'auto' in named.conf
The line:
dnssec-lookaside 'auto'
is no longer supported and removed in september 2017.
Maybe when directadmin adjusts the existing named.conf on new installs, they can remove or remark that line.
Activity Newest / Oldest
Richard G
I just installed a new server. DA won't put it in the named.conf but there will be a line on creading DNSSec advising to add dnssec-lookaside.
So it would be enough if they remove that line from the script.
Richard G
Well, even if Directadmin does not add it, it can remove it or mark it like it puts the // in front of
//listen-on port 53 { 127.0.0.1; };
//listen-on-v6 port 53 { ::1; };
and like they added the allow-transfer "none" statement.
So it's still a nice idea.
Dave
Are you sure DirectAdmin adds that? we always did that manually on servers.
Richard G
I thought they did, not sure anymore, but I added a comment.
Dave
I recently installed a Debian server and it was not there. Possibly only with CentOS? I did get the message from the script that I could add it if you use dnssec.sh.
Richard G
Thank you for your insight.
I might be wrong then. I heard it from another user who said it was in there after DA isntall but he did not know how t put in a request. So I checked a fresh installed VPS I had with Centos 7 which also contained the line.
But I might already have put it in there. I'm starting to doubt now.
DA will know. It they or Centos 7 don't put it in there, the idea can be ignored.
Dave
My suggestion is that Directadmin even checks /usr/local/directadmin/scripts/dnssec.sh. I see it in there.
Richard G
You're quite correct.
Could you upvote this request please so they will fix it?
Dave
Done.
Richard G
Thank you!