The DNSSEC means that I don't have to trust the DNS servers, and
national is geographically separated and in an entirely different AS.
allowservices inbound udp \
tripe
allowservices inbound udp \
tripe
+## Other interesting things.
+dnsresolver inbound
+dnsserver inbound
+
m4_divert(-1)
###----- That's all, folks --------------------------------------------------
m4_divert(-1)
###----- That's all, folks --------------------------------------------------