From 5106142cc173bc6a0da7b8addaf66365f6685748 Mon Sep 17 00:00:00 2001 From: Felix Stupp Date: Thu, 29 Oct 2020 20:57:27 +0100 Subject: [PATCH] dns/master: Disable checking hostnames for validity in BIND9 on dynamic updates --- roles/dns/master/templates/zone.conf | 2 ++ 1 file changed, 2 insertions(+) diff --git a/roles/dns/master/templates/zone.conf b/roles/dns/master/templates/zone.conf index e4fa195..01c55bf 100644 --- a/roles/dns/master/templates/zone.conf +++ b/roles/dns/master/templates/zone.conf @@ -19,6 +19,8 @@ zone "{{ domain }}" { type master; file "{{ database_file }}"; key-directory "{{ keys_directory }}"; + // do not check for correct hostnames + check-names ignore; // dnssec inline-signing yes; dnssec-policy "{{ domain }}-policy";