Enable DNSsec on our secondaries

diff --git a/modules/named/files/common/named.conf.options b/modules/named/files/common/named.conf.options
index b81be8c8742376a254793dc57469efc7d1360856..8d81ba42c72cddf1c5e9d3c567f1cacad2eb1e40 100644 (file)
--- a/modules/named/files/common/named.conf.options
+++ b/modules/named/files/common/named.conf.options
@@ -26,6 +26,9 @@ options {
         allow-transfer { none; };
         allow-recursion { Nagios; };
         blackhole { 192.168.0.0/16; 10.0.0.0/8; 172.16.0.0/12; };
+
+       dnssec-enable yes;
+       dnssec-validation yes;
 };
 
 logging {