unbound

Hello, Simple question that I cannot ascertain reading the unbound docs - If I have prefetch: yes in my /var/unbound/unbound.conf Can I then add prefetch: no Scoped to a specific forward zone, like below: forward-zone: name: "internal" forward-addr: 192.168.5.10 prefetch: no...

I'm trying to set up an unbound DNS server on a bhyve vm. On host, I have the following configurations, nothing special: root@host > cat /etc/rc.conf # NETWORK ifconfig_re0="inet 192.168.0.2/24" defaultrouter="192.168.0.1" ## ZFS zfs_enable="YES" # VM-BHYVE vm_enable="YES"...

FreeBSD 14.0. Neither /usr/local/etc/rc.d/unbound, nor /etc/rc.d/local_unbound list syslogd among their requirements. So, if unbound service (either one) is started by setting respective X_enable="YES" in /etc/rc.conf, then it just so happens that unbound is started before syslogd. Which means...

Hi All, Happy New Year. I have configured my postfix mail server for ipv4 and ipv6. When I tried to setup RDNS through my ISP, they said they can delegate the ipv6 subnet to my local nameserver where I can set the reverse dns records. Has anyone done this before, if so any help is appreciated.

Hi, I have a public interface (vlan99) configured on my machine (FreeBSD machine 13.1-RELEASE FreeBSD 13.1-RELEASE releng/13.1-n250148-fc952ac2212 GENERIC amd64). I have configured the DNS on it and I want to configure PF firewall for only this public interface (vlan99) in a way that traffic...

EFFECT drill resolves r0.z201 correctly to 192.168.201.1. host resolves r0.z201 correctly to 192.168.201.1. ping works when given argument 192.168.201.1. ping doesn't work when given argument r0.z201. (fails to resolve) OBSERVATIONS When using truss I can see that ping does...

Hello everyone, I want to migrate my current DNS server from a Windows Server to FreeBSD. The DNS server should have the following features: Authorative DNS (for my Internal network only) Resolving DNS High Availability So far I have found named (aka. BIND9) and nsd + local-unbound as...

I've read through a bunch of documentation but I'm not sure of a few things, so I'm looking for some tips before I mess up my office. Thanks in advance! Here's our setup in a small office: 1. Internet comes in to an ASUS RT-AC1900P WIFI router and then to a simple switch. We have 5 Windows...

I've been running dns/unbound for quite a while (at least a couple of years) on multiple machines - for starters, both my mail server and my firewall box use it as caching dns server. Both use the same configuration, and have done so for months without any issues, if not longer. Over the last...

Hi All, I have some log messages which says "kernel: em0: promiscuous mode disabled" and enabled again, Am only running Unbound DNS resolver in my Freebsd 12.1 release p5. If it is not recomended to change the status can you explain me how to fix the state of promiscuous mode.

Am trying to Build a Firewall for Unbound DNS resolver since a month and was not successful, solved almost all the configs except the IPFW rules, using FreeBSD 12.1-RELEASE-p5 Below are my rule list NOTE: a.a.a.a , b.b.b.b, c.c.c.c and d.d.d.d are my ipv4 Public IP pools...

I've been trying to figure this one out. I'm using FreeBSD 11.2-RELEASE-p10 amd64, unbound Version 1.9.1 I have dual WAN, but one is solely for failover (no DNS queries should occur on failover while primary WAN is up). Is there any way to only use the primary WAN as the outgoing-interface...

I'm currently using hblock with Arch Linux on my laptop: and now I'm wondering what the recommended approach for something like this could be when using FreeBSD. What comes to mind: Simply stick to using a hosts file Use a DNS resolver like unbound with a blocklist Use a DNS proxy like...

Hi All, I am trying to create SRV records in the NSD zonefile for network services. Is this possible with NSD and Unbound running on FreeBSD 11.2? The format I am using looks like this: ;SRV Records _cisco._tcp IN SRV 10 10 5060 cpub.example.com. _login._tcp...

Hi there, I'm too new to BSD and pf so I can't accomplish the following task and receiving generic "syntax error", maybe because of tables or macros. Here's the scenario: a server in DMZ with unbound (serving as resolver to other machines in DMZ) and NSD (authoritative for an Internet domain)...

Hi guys, i am wondering if i can setup my unbound to serve as dns over tls. It will serve as full recursive mode. The reason why i wanna do that so i can use unbound outside my local network, eg: on the road mobile. I am aware that i can setup unbound to forward queries to 3rd party dns server...

Hi All I have unbound running on my laptop. When I booted up today I couldn't resolve any hosts. Finally figured out it was the resolv.conf. I had to uncomment the external google nameserver to resolve any hosts. So my resolv.conf now looks like this # Generated by resolvconf search...

I have not found anywhere in the docs how to make selections from syslog by ident. I use chrooted Unbound and I've configured it to write its log to syslog. I've found in syslog.conf an example how to select records from syslog by program name: !unbound *.* /var/log/unbound.log !* But...

Good day! I have a FreeBSD 11.1 amd64 box as router for about 300 users. On that server works unbound (from system, not ports) as resolver for network. And in /var/log/messages I such messages: Jan 30 11:29:10 MAIN-GATE unbound: [59552:2] notice: sendto failed: No buffer space available Jan 30...

Hello, Very important change was in the package 'unbound' of the world DNSSEC. The changing or "rolling" of the KSK Key was originally scheduled to occur on 11 October, but it is being delayed because some recently obtained data shows that a significant number of resolvers used by Internet...