On Wed, Jun 11, 2025 at 04:56:14PM +0200, Jan-Piet Mens via Pdns-users wrote:
> > rec_control add-nta domain.example botched keyroll > > > > ....would set dnssec validations for domain.example. to "off"....? > > Correct, though the multple arguments as reason look a bit suspicious to me; I > cannot test now, but it might be you have to quote the "botched keyroll" > arguments. Multiple "reason" arguments do not need to be quoted. Note that adding an NTA using rec_control adds an NTA in a non-persistent way. The NTA wil be gone after a restart. See https://docs.powerdns.com/recursor/yamlsettings.html#dnssec-negative-trustanchors for a permanent setting. -Otto _______________________________________________ Pdns-users mailing list Pdns-users@mailman.powerdns.com https://mailman.powerdns.com/mailman/listinfo/pdns-users
