X-Git-Url: http://mj.ucw.cz/gitweb/?a=blobdiff_plain;f=cf.dist%2Fdomains;h=4ec0d214bfc19694a43d8dbd608a7c9a885def92;hb=25e78a5e4d9efddd909952300478057b64cb88cd;hp=7d3dcd7e207eed2544541fe296d36d2442018360;hpb=e1865af4bbc397337b7144cfaf22f86cdf4e09d4;p=nsc-5.git

diff --git a/cf.dist/domains b/cf.dist/domains
index 7d3dcd7..4ec0d21 100644
--- a/cf.dist/domains
+++ b/cf.dist/domains
@@ -1,7 +1,7 @@
 ; An example domain table for the NSC
 
-; Hints how to find root servers
-ROOTHINT()
+; If you do not want to use DNSSEC, please remove the lines
+; commented with "; DNSSEC".
 
 ; Various mandatory things required by RFC 1912, section 4.1
 PRIMARY(localhost)
@@ -31,9 +31,10 @@ BLACKHOLE(REV(192.168))
 
 ; A pretty normal example domain (we act as a primary nameserver for it)
 
-DNSSEC(`
+DNSSEC(`			; DNSSEC
 PRIMARY(example.com)
-')
+DSFOR(a.example.com)		; DNSSEC
+')				; DNSSEC
 
 ; It also has a couple of sub-domains and one of them resides on another server
 
@@ -54,8 +55,10 @@ ZONE_OPTIONS()
 ; Here are reverse delegations for two networks. NSC automatically creates
 ; the PTR records from A records in all mentioned zones. See cf/{0,1}.0.10.
 
+DNSSEC(`			; DNSSEC
 REVERSE(10.0.0, example.com, a.example.com)
 REVERSE(10.1.0, example.com, a.example.com, ip6.example.com)
+')				; DNSSEC
 
 ; You can even have reverse zones for larger networks