private trust anchor

[Chris Buxton]

On Feb 10, 2013, at 3:26 PM, Evan Hunt wrote:

> Then configure the
> zones as "type forward", with "forwarders" pointing to the authoritative
> server(s) for your zones.  The resolver will then forward queries for those
> names to the authoritative servers, and validate the responses.

Type forward? Really? I didn't expect that to come from someone at ISC.

Use 'type stub' instead, with a masters statement rather than a forwarders statement.

Chris Buxton