Getting DNSMASQ_WARN "Negative DS reply without NS record received for nas, assuming non-DNSSEC domain-specific server." The installation is fresh on raspian trixie with unbound as recursive resolver and activated dnssec. Is this warning new, since i was a long time away from pihole?
maybe its normal and wanted, thought I ask here
Running without that warning
Warning pops up.
reading up again makes sense i guess.
No DNSSEC possible for local domains, which is right.
But I think this doesn't help the me directly, since I want dnssec itself on.
Is there a way to disable it for specific local domains?
Disable DNSSEC on Pi-hole.
If you have Unbound for upstream, it does already do DNSSEC validation for the public domains ... if available.
Dont need Pi-hole to do it a second time.
EDIT: Ps. the official Unbound guide also doesnt mention enabling DNSSEC on Pi-hole!
yes, makes sense. Thanks.
i thought I made the same thing in the past (Around 2 years ago)
