Questions tagged [unbound]
Unbound is an open-source DNSSEC validating DNS resolver.
47
questions
1
vote
0answers
25 views
Unbound block list , How to know from query log that if domain blocked or not?
I have configured an Unbound server with domain block list, blocking works perfectly fine.
But from the query log, i can only see that blocked domain is queried, that's it.
I tired with
server:
local-...
0
votes
0answers
62 views
Unbound not returning A records over IPv6
I recently replaced my pfSense installation with OPNsense and have been struggling a bit with the Unbound installation.
In short, it's IPv6 enabled and everything works well (both IPv6 and IPv4) in ...
0
votes
0answers
42 views
Runing unbound doh behind nginx
I'm trying to run unbound DoH behind nginx but I'm getting a 502 Bad Gateway error.
In nginx log I have the following message:
2021/03/25 08:54:49 [error] 10052#10052: *1 upstream prematurely closed ...
0
votes
0answers
183 views
Bind9 vs Unbound. Which is better for VPN node and why?
I am currently in the process of developing a VPN service. One of the necessary things for a proper VPN node is a DNS server that will prevent DNS leaks, and whilst working on this project I stumbled ...
0
votes
1answer
211 views
Can't get unbound to work in docker container
It seems pretty simple to set up but I can't actually get it working..
Setup:
$ docker run -it -p 53:5300/udp alpine /bin/sh
$ apk add bash nano wget ca-certificates bind-tools unbound
$ mkdir -p /...
0
votes
0answers
30 views
Unbound: How to intercept domain without any dots?
In dnsmasq, settings domain-needed and address=// could both return NXDOMAIN results to prevent forwarding domain without any dot or domain part.
Is there any solution in unbound? I tried local-zone: &...
0
votes
0answers
1k views
Fallback to forwarding with Unbound?
I'm using Unbound on an internal network What I want it to do is as follows:
If a local_zone matches, return from there
If not and it matches the internal domain name, then try forwarding to Consul ...
0
votes
1answer
355 views
Unbound doesn't accept answer from non-DNSSEC forward rule
Unbound gets the right answer (see below) from a forward-zone, but proceeds to ignore it and try to query other DNS servers.
I'm running unbound (1.10.0) on a docker image when behind a public ...
1
vote
1answer
742 views
Unbound can't seem to read certificate files for DNS-over-TLS, gets “Permission denied”
I'm trying to set up DNS-over-TLS (DoT) with unbound resolver. i.e. I'm trying to encrypt the connection between the client and unbound I'm NOT trying to encrypt the unbound resolver → upstream ...
0
votes
1answer
241 views
Measuring/monitoring Unbound Resolver Performance
I am running Unbound resolver on FreeBSD, and i am looking for a solution to measure its performance.sometimes there are some delays in regard of resolving domain names,and my customers are ...
2
votes
0answers
807 views
Unbound DNS Partial Authority of Zone
There is a public domain registered by somebody on the Internet. Let's say "example.com".
I need my Unbound server to be partially authoritative for the zone "example.com" for my internal client ...
1
vote
1answer
447 views
unbound periodically stops working
I have been using unbound as a caching DNS server forwarding to dnscrypt-proxy and it was working relatively well for a while (years, although about a year or so with dnscrypt-proxy) requiring no ...
0
votes
0answers
3k views
Dig +trace not working, while +notrace works
I am trying to troubleshoot some DNS issues and I am starting by trying to trace my DNS lookups using dig +trace. Im getting some weird results. If do a normal dig to my unbound resolver.
dig @192....
0
votes
2answers
2k views
unbound.service service unit slow start/restart on 1 VM and fast on another
I am debugging an issue with Unbound (DNS Resolver software) on CentOS Linux release 7.5.1804 (Core). I have 2 VMs in different environments that are supposedly running the same Unbound software.
[...
1
vote
0answers
923 views
Unbound config to forward unknow local subdomain name
I am currently on a local aera network where no loop-back is allowed meaning that I cannot reach my public IP address from the local network.
Several services need to be migrated in my local area ...
1
vote
0answers
880 views
Unbound forward-zones of subdomains overlap
I have a subdomain (imap) that is accessible from an external network and I have some subdomains (file-drive) that are only accessible form the internal network. I do not have access to the dns-server ...
0
votes
0answers
3k views
unbound.conf server option “private-domain” - domain name ending in a dot nor not?
unbound.conf is used to configure Unbound, a caching DNS resolver. The documentation of version 1.6.8 says:
Server Options
private-domain: <domain name>
Allow this domain, and all ...
2
votes
1answer
17k views
Unbound doesnt start
after installing Unbound
apt-get -y install unbound dnsutils
su -c "unbound-anchor -a /var/lib/unbound/root.key" - unbound
systemctl reload unbound
apt-get -y install resolvconf
echo "nameserver ...
1
vote
0answers
2k views
Unbound DNS: how to ask forwarders only after direct NS query is failed
By default, Unbound DNS server works by "classic" scheme: queries root servers for zone NS records, then queries NS'es for A/AAAA/...
Sometime (rarely) connectivity between my DNS and target NS'es is ...
2
votes
2answers
8k views
unbound forward zone syntax
I want to configure unbound to lookup certain domain names with an alternative dns server, with forward-zone. The documentation I find have two syntaxes:
forward-zone:
name: "mynetwork.com."
forward-...
2
votes
1answer
4k views
Configure LXC to use specific DNS server instead of DNSMASQ
Out of the box, my LXC containers connect to a running instance of dnsmasq, which is started with the lxc-net service.
In my case, I am running a local unbound DNS server that connects to a thing ...
0
votes
1answer
512 views
Setup Unbound DNS for both caching/local usage and website ns
I want to use Unbound as caching and as my ns1.domain.com nameserver with DNSSEC.
I came across Unbind which looks quite easy to setup and use.
unbound-control local_data "mywebsite.com A 11.22.3.44"...
-2
votes
2answers
554 views
Unbound : what capacity will i need on drive? [closed]
I'm planning to set up my own dns server (for a cybercafe, 30 computers)
what size will unbound need on hdd after months of use ?
Mb, Gb, Tb ?
1
vote
2answers
403 views
Are search domains from resolv.conf used only for A/AAAA queries?
Are the user provided search domains from resolv.conf used only for A/AAAA queries ?
Are they used for any other purpose ?
2
votes
1answer
4k views
How to make Unbound block private IPs in resolved domains (DNS rebinding)
I set up Unbound in my local network as a local DNS resolver. I noticed that it will not filter any private IP addresses in the resolved domains and forward any IP address that a domain resolves to.
...
2
votes
1answer
71 views
How can I prevent unbound from restarting?
I'm running unbound version 1.4.22
Every time I run pon or poff (PPPoE connections) unbound restarts, as seen in the unbound logfile. I easily confirm this is the case by repeating a DNS query that ...
3
votes
1answer
3k views
Unbound Syntax Error
I am trying to use unbound to forward requests to a pair of dns servers, while answering a small hand full of queries locally. In testing this out, I have built the following configuration at /etc/...
4
votes
2answers
2k views
Unbound - domains cached only for short time
I recently set up Unbound for DNS caching, along with DNScrypt on Linux Mint 18.1. It works, but I noticed the pages are cached only for short time:
First query to google.com - 48ms (domain not ...
3
votes
0answers
4k views
Unbound refuses requests from localhost even though `access-control: 127.0.0.1 allow_snoop`
This is my unbound.conf
server:
interface: 0.0.0.0
access-control: 10.0.0.0/8 allow_snoop
access-control: 127.0.0.1 allow_snoop
access-control: 192.168.0.0/16 allow_snoop
...
Reading the ...
1
vote
1answer
3k views
unbound not forwarding query to another recursive DNS server
I'm trying to use unbound to forward DNS queries to other recursive DNS server. My unbound.conf looks like:
forward-zone:
name: "."
forward-addr:x.x.x.x
forward-addr:x.x.x.x
forward-addr:x.x.x.x
But ...
1
vote
0answers
781 views
Puppet odd issue - Error 400 on SERVER: Duplicate declaration: Unbound::Record[host.example.com] is already declared in file
Hope someone could help me with my issue )
So, I have several VHost which managed by puppet, including DNS (unbound). One vhost was deleted some time ago and and recreated recently with new IP ...
3
votes
1answer
1k views
Reverse DNS Lookup for 10.* Failing
I am trying to configure NSD and Unbound to handle Internal DNS.
I have everything working for forward look ups but reverse looks ups are failing.
I am not sure what to do next, but looking at the ...
1
vote
3answers
3k views
Resolving route53 private hosted zone cnames internally
We have a DNS server outside of AWS, inside we have route53 with some private hosted zones. I want cnames on the private hosted zones to be available internally (when you access them inside the office)...
0
votes
0answers
56 views
Restrict DNS usage to some clients
I firstly asked the question here:
https://networkengineering.stackexchange.com/questions/33948/restrict-dns-usage-to-some-clients
I would like to create a unbound DNS server. I don't have the IP ...
0
votes
2answers
11k views
Public pfSense don't resolve external DNS lookups
I have pfSense with external IP with Unbound DNS Resolver running on it.
When I send inquiry from internal network, it replies, but when I send inquiry from external machine it doesn't reply.
...
3
votes
1answer
700 views
Alternative ways to get past 32 rpz zone limit in BIND? …without running BIND a thousand times
Using BIND RPZs gives me exactly what I'm looking for to alter queries. However, my recursive DNS server is in use by hundreds of clients and I am looking for a way to allow each client some level of ...
1
vote
1answer
971 views
Best Practice for Unbound Caching DNS server
We have an Unbound caching server that was setup by another internal team. However, there is no logging enabled. I not only want this enabled for troubleshooting internal name resolution issues, but ...
1
vote
1answer
814 views
disable access-control for unbound DNS server
I have a public DNS server that obviously needs to respond to everyone and anyone. Setting up the access-control directive allowing access from every IP results in a "netblock too large" error.
Does ...
1
vote
1answer
2k views
Unbound DNS resolver for a network
I'm actually trying to create a DNS resolver for my local network, to do so, I choosed to use unbound, so I installed it on an Arch Linux server, and it's working, but only for the local machine (127....
0
votes
1answer
2k views
DNS lookup to localhost gives network error
I am running a recursive DNS server on Unbound in a jail on FreeBSD with pf as a firewall.
Running drill @xxx.xxx.xxx.xxx example.com (where xxx.xxx.xxx.xxx is the servers IP) on my local machine ...
1
vote
1answer
2k views
Which upstream servers is unbound using? [closed]
In order to have local DNSSEC validation, I set up a Raspberry Pi (having a static IP) with Raspian Jessie and unbound to offer a DNS server to my LAN.
After I looked up some tutorials and howtos, I ...
4
votes
1answer
3k views
Unbound stub-host option not resolving using /etc/hosts
I have unbound running as an validating, caching, recursive dns server and nsd3 running as an authoritative nameserver. It seems like every aspect of both work correctly until I attempt to resolve an ...
1
vote
1answer
2k views
How to do parallel queries to the upstream DNS using Unbound?
Can I configure Unbound as forwarder but that it alway send a query to ALL upstream DNS servers that I configure and take as valid reply the first in arrive?
Such feature exist in nsmasq pfSense:
...
0
votes
1answer
441 views
Postfix + Unbound for a Single IP Address Only
I'm running in to an issue using zen.spamhaus.org in Postfix. It appears too many people are using the same nameservers I am using .. and I'm getting blocked.
What I'd like to do is setup Postfix to ...
11
votes
2answers
12k views
unbound/nsd returning SERVFAIL resolving local LAN DNS. nsd alone works fine
I've been using unbound as a local recursive DNS server. Just added nsd to set up local LAN DNS. nsd is listening on port 53530 and that works fine:
$ dig @127.0.0.1 data2.datanet.home -p 53530
; &...
1
vote
1answer
795 views
What could this extra 50ms latency be on my unbound DNS resolving server (Fedora)?
I have a discrepancy in query latency. It's not a problem, it's just strange enough to worry me.
Client machine (Fedora 18) runs unbound-1.4.19-1.fc18.x86_64.
Server machine (Debian 7 testing) runs ...
4
votes
4answers
7k views
How to do views in Unbound DNS Server
How would I use the BIND "views" feature in Unbound? I don't seem to be able to find anything online regarding this.
