Update unbound.md

add ad flag to dig command

Update unbound.md

Update unbound.md to include more information about the DNSSEC validation flags.

Signed-off-by: HeliusMagnum <82977614+HeliusMagnum@users.noreply.github.com>
This commit is contained in:
HeliusMagnum
2025-07-14 02:10:38 -04:00
parent b11f98db2f
commit 97c6a849b7

View File

@@ -169,10 +169,10 @@ You can test DNSSEC validation using
```bash
dig fail01.dnssec.works @127.0.0.1 -p 5335
dig dnssec.works @127.0.0.1 -p 5335
dig +ad dnssec.works @127.0.0.1 -p 5335
```
The first command should give a status report of `SERVFAIL` and no IP address. The second should give `NOERROR` plus an IP address.
The first command should give a status report of `SERVFAIL` and no IP address. The second should give `NOERROR` plus an IP address in addition to a `ad` in the `flags:` section. The `ad` signifies (Authentic Data), indicating the DNS response has been authenticated and validated using DNSSEC.
### Configure Pi-hole