get rid of broken nameservers

[dsa-puppet.git] / modules / unbound / templates / unbound.conf.erb

diff --git a/modules/unbound/templates/unbound.conf.erb b/modules/unbound/templates/unbound.conf.erb
index 5dad16318c0a75c63108b612d9fc603670bf771e..fe710ea916e09e8774cab7e85c3601d63257ac87 100644 (file)
--- a/modules/unbound/templates/unbound.conf.erb
+++ b/modules/unbound/templates/unbound.conf.erb
@@ -44,7 +44,7 @@ server:
        auto-trust-anchor-file: "/var/lib/unbound/root.key"
        auto-trust-anchor-file: "/var/lib/unbound/debian.org.key"
 
-<% if not @is_recursor and not @client_ranges -%>
+<% if (not @is_recursor) and @ns -%>
 forward-zone:
        name: "."
 <% @ns.to_a.flatten.each do |nms| -%>