Unbound is a validating, recursive, and caching DNS resolver.
Unbound is a validating, recursive, and caching DNS resolver.
Questions tagged [unbound]
17 questions
5
votes
1 answer
pfSense DNS Resolver does not resolve local hostnames from DHCP static mappings
I'm on pfSense Community Edition 2.4.5-RELEASE-p1
I assigned some static DHCP mappings on one of my LAN interfaces
If I try to reach any one of those static mapped hosts by its Hostname (or by Client Id), pfSense does not resolve its IP address.
I…
mfloris
- 261
4
votes
2 answers
unbound DNS: can't list domains via nslookup
I configured unbound DNS on a CentOS server and set a local-zone in it.And I have turned off the firewall on the server.
On Windows I tried to use the nslookup command to verify DNS records in unbound DNS, but the result is: …
user1044114
3
votes
3 answers
How to configure Unbound to validate a DNS over TLS server's certificate?
I have configured Unbound to use DNS over TLS using the following configuration. How can I configure Unbound to validate the upstream certificate against a hostname?
forward-zone:
name: "."
forward-addr: 1.1.1.1@853
…
Bardi Harborow
- 350
3
votes
1 answer
isc-dhcp-server + BIND9 + Unbound + dnscrypt & DDNS Not working
Original
I have a complex DNS set-up on my home router that's running Ubuntu servers. My objective is to be able to,
Query my local ISP's DNS for geo leocation sensitive lookups that I care about
dnscrypt-proxy for the majority of look-ups. For…
M Afifi
- 151
2
votes
1 answer
Unbound (with PiHole): Where is root.hints?
I installed unbound to use with pihole with this instruction:
https://docs.pi-hole.net/guides/dns/unbound/
It says that I don't need to download root.hints, if I use apt install. Because it would download root.hints automatically with the…
User123456789
- 427
1
vote
0 answers
How to configure a Forward Zone to handle nested domains?
My Unbound configuration contains an entry for domain example.com:
forward-zone:
name: "example.com"
forward-addr: 10.20.30.1
forward-addr: 10.20.30.2
It works fine for the FQDN hello.example.com resolution, but not for…
WoJ
- 3,875
1
vote
0 answers
PfSense Unbound deny requests from another Lan
I have PfSense Home server, with two interfaces, LAN and Wifi with Captive Portal.
DNS Resolver works perfectly for both, I forced redirection dns trafic at WAN Public DNS to the Firewall itself.
And Wifi Guests are only allowed
to :
DNS port 53 to…
Sangohan
- 11
1
vote
1 answer
Why does port redirection via IPtables for a second DNS resolver on the same server not work?
I have a Raspberry Pi that is running Bind9 as an authoritative DNS server for a local zone. Every other DNS requests are forwarded to a public DNS server. So Bind9 is listening on port 53 at address 192.168.1.254.
Now I want to install Unbound on…
idlmn89
- 213
1
vote
1 answer
Unbound DNS: Troubleshooting with ssl-upstream option and/or vpn interface
I recently wanted to setup unbound in place of dnscrypt to resolve queries with my pi-hole on my rasp.
The version of unbound available on Raspbian is 1.6.0 currently.
When activating the options
ssl-upstream: yes
ssl-service-key:…
vigilian
- 235
1
vote
0 answers
Unbound DNS for lan network
I have problem with setting up dns server using unbound.
Unbound is set up on freeBSD ('dns.home.local' - 192.168.0.228) and it works, resolving local names (both 'gate' or 'gate.home.local') and forwarding everything else.
If I set up this…
1
vote
1 answer
Unbound DNS: Troubleshooting/Resolving Unbound Configuration Problems?
Every time I try to launch the Unbound DNS server via Homebrew Services with the command 'sudo brew services start unbound,' I start seeing log entries of the following form in OS X's 'Console' application…
RandomDSdevel
- 143
0
votes
1 answer
What can be the cause if DNSSEC suddenly stops working and normal resolving is extremely slow viua unbound?
Suddenly, every .com domain failed DNSSEC validation (regardless of it is signed or not), and normal resolving fails randomly with DNSSEC disabled, for example all youtube videos say "A error occured".
Manually resolving urls with dig or nslookup…
sebastian nielsen
- 1,031
0
votes
1 answer
Pi-hole fails to connect to Unbound DNS
The issue I am facing:
Pi-hole cannot connect to Unbound DNS
What I want to happen
I want to use Pi-hole to filter my network, and Encrypted Unbound as DNS for privacy. I have already set-up both Pi-hole and Unbound, and both seems to be working…
H2WO
- 33
0
votes
1 answer
Unbound: dig domain.tld only workes sometimes?
I set up unbound as described in this instruction:
https://docs.pi-hole.net/guides/dns/unbound/
To test unbound, I should use
dig pi-hole.net @127.0.0.1 -p 5335 (gives ok as result)
dig sigfail.verteiltesysteme.net @127.0.0.1 -p 5335 (gives…
User123456789
- 427
0
votes
1 answer
Using local unbound DNS server for Strongswan VPN connections
Idea: I would like to use unbound DNS installed on the same server as VPN solution, to block ads and similar unwanted sites with DNS for all VPN connections.
Currently unbound is set up for local requests.
How can I set up Strongswan/ipsec to use…
b4d
- 113
- 1
- 7