named-checkconf geoip check is incomplete
named-checkconf
can check geoip ACL's for syntactic correctness, but it can't check whether a geoip database is installed that can support the configuration. This means named-checkconf
can greenlight a configuration that will be rejected by named
.