national.m4: Configure as an authoritative DNS server.
authorMark Wooding <mdw@distorted.org.uk>
Fri, 1 Jul 2016 20:40:09 +0000 (21:40 +0100)
committerMark Wooding <mdw@distorted.org.uk>
Fri, 1 Jul 2016 20:40:09 +0000 (21:40 +0100)
The DNSSEC means that I don't have to trust the DNS servers, and
national is geographically separated and in an entirely different AS.

national.m4

index 01551af..d58593a 100644 (file)
@@ -33,5 +33,9 @@ allowservices inbound tcp \
 allowservices inbound udp \
        tripe
 
 allowservices inbound udp \
        tripe
 
+## Other interesting things.
+dnsresolver inbound
+dnsserver inbound
+
 m4_divert(-1)
 ###----- That's all, folks --------------------------------------------------
 m4_divert(-1)
 ###----- That's all, folks --------------------------------------------------