科学Linux 7绑定不转发

Question

我安装了名称-chroot，并将其配置为内部网络。一切都很好，但什么都没有被转发。

这是我的配置：

options {
    listen-on port 53 { 127.0.0.1; 192.168.0.15; };
    #listen-on-v6 port 53 { ::1; };
    directory       "/var/named";
    dump-file       "/var/named/data/cache_dump.db";
    statistics-file "/var/named/data/named_stats.txt";
    memstatistics-file "/var/named/data/named_mem_stats.txt";
    allow-query     { clients; };
    notify master-only;
    transfers-in 30;
    auth-nxdomain no;
    empty-zones-enable yes;
    allow-recursion { clients; };
    allow-transfer { localhost; };
    forwarders { 194.15.215.236; 194.15.215.237; 194.15.215.2; };
    recursion yes;

    dnssec-enable yes;
    dnssec-validation yes;
    dnssec-lookaside auto;
    /* Path to ISC DLV key */
    bindkeys-file "/etc/named.iscdlv.key";
    managed-keys-directory "/var/named/dynamic";
    pid-file "/run/named/named.pid";
    session-keyfile "/run/named/session.key";
};

zone "." IN {
        type hint;
        file "named.ca";
};

#zone "localhost" {
#        type master;
#        file "standard/localhost";
#        allow-transfer { localhost; };
#};

zone "127.in-addr.arpa" {
        type master;
        file "standard/loopback";
        allow-transfer { localhost; };
};

#zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" {
#        type master;
#        file "standard/loopback6.arpa";
#        allow-transfer { localhost; };
#};

include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";

我还在Google上搜索了很多，禁用了DNSSEC，等等，我找不到解决方案。

Answer 1

我把配置缩短了一点。

问题是，禁用DNS Sec在代理上是持久的。在keppen关闭几分钟后，代理确认了这一点。

谢谢!