===================================================================
RCS file: /cvsrepo/anoncvs/cvs/src/etc/unbound.conf,v
retrieving revision 1.5
retrieving revision 1.6
diff -u -r1.5 -r1.6
--- src/etc/unbound.conf	2015/07/19 17:29:42	1.5
+++ src/etc/unbound.conf	2015/12/15 20:26:55	1.6
@@ -1,4 +1,4 @@
-# $OpenBSD: unbound.conf,v 1.5 2015/07/19 17:29:42 sthen Exp $
+# $OpenBSD: unbound.conf,v 1.6 2015/12/15 20:26:55 sthen Exp $
 
 server:
 	interface: 127.0.0.1
@@ -14,6 +14,11 @@
 	hide-identity: yes
 	hide-version: yes
 
+	# Uncomment to enable qname minimisation.
+	# https://tools.ietf.org/html/draft-ietf-dnsop-qname-minimisation-08
+	#
+	# qname-minimisation: yes
+
 	# Uncomment to enable DNSSEC validation.
 	#
 	#auto-trust-anchor-file: "/var/unbound/db/root.key"
@@ -36,6 +41,13 @@
 	# DNS requests over an SSH port forwarding.
 	#
 	#tcp-upstream: yes
+
+	# DNS64 options, synthesizes AAAA records for hosts that don't have
+	# them. For use with NAT64 (PF "af-to").
+	#
+	#module-config: "dns64 validator iterator"
+	#dns64-prefix: 64:ff9b::/96	# well-known prefix (default)
+	#dns64-synthall: no
 
 remote-control:
 	control-enable: yes