# No outbound DNS at all unless a network module asks for it. Belt to the braces
# of disabling the modules themselves (see rbl.conf, surbl.conf, fuzzy_check.conf).
dns {
  enable_dnssec = false;
}