Thanks I'll try that.

-----Original Message-----
From: Evan Hunt <e...@isc.org>
Sent: Thursday, March 6, 2025 1:46 PM
To: Chris Isaksen <chris.isak...@nysed.gov>
Cc: bind-users@lists.isc.org
Subject: Re: Questions about "dnssec validation" statement

On Thu, Mar 06, 2025 at 12:56:08PM +0000, Chris Isaksen wrote:
> I was wondering if dnssec validation could be set to auto in the
> options section and then set it to 'no' in a particular zone?
>
> We would like to use "dnssec validation auto"  but a few forwarding
> zones we have, we know do not use dnssec and queries fail if it's not
> set to no.

"validate-except { domain1; domain2; ... };"

--
Evan Hunt -- e...@isc.org
Internet Systems Consortium, Inc.


Confidentiality Notice

This email including all attachments is confidential and intended solely for 
the use of the individual or entity to which it is addressed. This 
communication may contain information that is protected from disclosure under 
State and/or Federal law. Please notify the sender immediately if you have 
received this communication in error and delete this email from your system. If 
you are not the intended recipient you are notified that disclosing, copying, 
distributing or taking any action in reliance on the contents of this 
information is strictly prohibited.

-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to