Hello Martin, On 29 Jan 2015, at 7:45 , Martin Chandler <[email protected]> wrote:
> I am running a PowerDNS hidden master behind BIND dns servers serving to > the public. > > We have a mix of DNSSEC secure zones, and non-secure zones. > > My question is do I have to 'rectify-zone' on the non-secure zones? > (does Powerdns still need the auth and ordername for non-secure zones?) On non-secure zones, ordername is ignored, but auth is not. However, if you just set auth=1 on all records, you get the ‘old’ behaviour, which has been demonstrated to work just fine in practice. If you use the 3.4.0+ SQL schema, you get auth=1 by default. Kind regards, -- Peter van Dijk Netherlabs Computer Consulting BV - http://www.netherlabs.nl/ _______________________________________________ Pdns-users mailing list [email protected] http://mailman.powerdns.com/mailman/listinfo/pdns-users
