Questions tagged [unbound]
Unbound is an open-source DNSSEC validating DNS resolver.
62
questions
0
votes
1
answer
40
views
Putting a caching nameserver in front of ad
I would like to set up a caching nameserver to meet some requirements in the datacenter. Some of these requirements make me to put this caching nameserver between my servers and AD (e.g. collecting ...
- 33
-2
votes
0
answers
45
views
Pi-hole fails to connect to Unbound DNS [migrated]
The issue I am facing:
Pi-hole cannot connect to Unbound DNS
What I want to happen
I want to use Pi-hole to filter my network, and Encrypted Unbound as DNS for privacy. I have already set-up both Pi-...
- 1
0
votes
0
answers
53
views
Unbound DNS (Redirection of LAN)
I'm trying to redirect my LAN queries to local DNS server (installed in LAN) instead of default DNS ie 8.8.8.8.
I'm using unbound 1.13.1 and tried the following:
tried localzone
local-zone: "10....
- 9
0
votes
0
answers
63
views
Centos - Unbboud and URIBL_BLOCKED blacklist
I am facing the following problem:
My websites have contact forms. People reach out to me via contact form. I receive 1 email after every contact form sent.
Since about 1 week Ms Outlook is marking my ...
- 329
0
votes
0
answers
17
views
how to implement edns client tagoption code
I've been searching for edns and found these documents. They mention something called client tag and server tag. Is there any way I can implent those tags? Here is my use case: Our product teams have ...
- 33
4
votes
1
answer
336
views
Understanding how Unbound listen on Port 53
I have installed unbound on Debian Buster. Now I wonder why unbound listens 2 times on each Protocol.
netstat -tulpn
tcp 0 0 0.0.0.0:53 0.0.0.0:* LISTEN ...
- 443
2
votes
1
answer
225
views
DNS - Unbound - How to provide different IP for a server based on client network
We have an intranet DNS server using Unbound in FreeBSD. We have another file server with multiple network IP, First one is 10.10.10.10 and Second one in 192.168.10.10.
Is there any way that DNS ...
- 145
0
votes
0
answers
18
views
unbound query logging stops after a period of time
I have configured unbound to log queries.
I can see queries in the log for a period of several hours, but ultimately, logging of queries stops, until I reload the service, at which point logging ...
- 3,359
0
votes
1
answer
180
views
Can't Receive Email - Postfix iRedMail Server Using Spamhaus & Unbound / BIND9 DNS Servers
iRedMail server configured using ISP's DNS servers. Running several years without issue. Moving from current ISP to Starlink. It appears Starlink uses Cloudflare's public DNS. Currently have both ISPs ...
- 1
2
votes
2
answers
486
views
How does unbound handle multiple forwarders (forward-addr)?
According to https://nlnetlabs.nl/documentation/unbound/unbound.conf/ multiple forwarders can be configured with forward-addr
For the forward zone this list of nameservers is used to forward the
...
- 157
0
votes
0
answers
37
views
Unbound stub files don't work?
I have an Unbound server and an NSD server.
re1 -- Unbound for recursive DNS
ns1 -- NSD for Authoritative DNS
Both of these servers work. I can 100% use dig and get an Answer using both. The problem ...
- 1
0
votes
0
answers
24
views
Illumos - configure Unbound to start automatically
I am running Illumos on a production system that is getting the DNS-settings from DHCP, and I would like to use Unbound as a local resolver to resolve hosts over DNS-over-TLS.
However, I am not sure ...
- 1,395
1
vote
0
answers
100
views
how to make unbound hold many queries for non cached address to cache it first
I am looking for a way to make unbound hold queries for the same address lookup when it is not cached. It should let only one query to be processed, after that answer cached it can reply other queries ...
- 33
0
votes
0
answers
132
views
Unbound recursive server not setting AD flag
I am running Unbound 1.9.0 as a recursive caching DNS server for a small branch office. It recurses over TLS towards cloudflare only and it has a typetransparent local-zone (example.com) overriding ...
- 131
1
vote
2
answers
77
views
Unbound sends recursive queries from default gateway
I am looking for an option that will make unbound to send recursive queries from a specific interface.
Listening interface is easy, but I can't find asking interface option.
I have 3 interfaces on my ...
- 33
0
votes
1
answer
654
views
Unbound error - unbound.service: Start request repeated too quickly
I am new using unbound.
I have a network 192.168.50.1 to 192.168.50.240. And I'd like to use DoH for non cache data.
my conf file:
# Unbound configuration file for Debian.
#
# See the unbound.conf(5) ...
- 101
1
vote
0
answers
250
views
Unbound block list , How to know from query log that if domain blocked or not?
I have configured an Unbound server with domain block list, blocking works perfectly fine.
But from the query log, i can only see that blocked domain is queried, that's it.
I tired with
server:
local-...
- 71
0
votes
0
answers
310
views
Unbound not returning A records over IPv6
I recently replaced my pfSense installation with OPNsense and have been struggling a bit with the Unbound installation.
In short, it's IPv6 enabled and everything works well (both IPv6 and IPv4) in ...
- 721
1
vote
1
answer
365
views
Runing unbound doh behind nginx
I'm trying to run unbound DoH behind nginx but I'm getting a 502 Bad Gateway error.
In nginx log I have the following message:
2021/03/25 08:54:49 [error] 10052#10052: *1 upstream prematurely closed ...
- 121
2
votes
0
answers
2k
views
Bind9 vs Unbound. Which is better for VPN node and why?
I am currently in the process of developing a VPN service. One of the necessary things for a proper VPN node is a DNS server that will prevent DNS leaks, and whilst working on this project I stumbled ...
- 31
0
votes
1
answer
885
views
Can't get unbound to work in docker container
It seems pretty simple to set up but I can't actually get it working..
Setup:
$ docker run -it -p 53:5300/udp alpine /bin/sh
$ apk add bash nano wget ca-certificates bind-tools unbound
$ mkdir -p /...
- 31
0
votes
0
answers
2k
views
Fallback to forwarding with Unbound?
I'm using Unbound on an internal network What I want it to do is as follows:
If a local_zone matches, return from there
If not and it matches the internal domain name, then try forwarding to Consul ...
0
votes
1
answer
932
views
Unbound doesn't accept answer from non-DNSSEC forward rule
Unbound gets the right answer (see below) from a forward-zone, but proceeds to ignore it and try to query other DNS servers.
I'm running unbound (1.10.0) on a docker image when behind a public ...
- 101
1
vote
1
answer
2k
views
Unbound can't seem to read certificate files for DNS-over-TLS, gets "Permission denied"
I'm trying to set up DNS-over-TLS (DoT) with unbound resolver. i.e. I'm trying to encrypt the connection between the client and unbound I'm NOT trying to encrypt the unbound resolver → upstream ...
- 3,581
0
votes
1
answer
408
views
Measuring/monitoring Unbound Resolver Performance
I am running Unbound resolver on FreeBSD, and i am looking for a solution to measure its performance.sometimes there are some delays in regard of resolving domain names,and my customers are ...
- 525
2
votes
0
answers
1k
views
Unbound DNS Partial Authority of Zone
There is a public domain registered by somebody on the Internet. Let's say "example.com".
I need my Unbound server to be partially authoritative for the zone "example.com" for my internal client ...
- 21
1
vote
1
answer
611
views
unbound periodically stops working
I have been using unbound as a caching DNS server forwarding to dnscrypt-proxy and it was working relatively well for a while (years, although about a year or so with dnscrypt-proxy) requiring no ...
- 243
1
vote
0
answers
4k
views
Dig +trace not working, while +notrace works
I am trying to troubleshoot some DNS issues and I am starting by trying to trace my DNS lookups using dig +trace. Im getting some weird results. If do a normal dig to my unbound resolver.
dig @192....
- 11
0
votes
2
answers
2k
views
unbound.service service unit slow start/restart on 1 VM and fast on another
I am debugging an issue with Unbound (DNS Resolver software) on CentOS Linux release 7.5.1804 (Core). I have 2 VMs in different environments that are supposedly running the same Unbound software.
[...
- 31
1
vote
0
answers
1k
views
Unbound config to forward unknow local subdomain name
I am currently on a local aera network where no loop-back is allowed meaning that I cannot reach my public IP address from the local network.
Several services need to be migrated in my local area ...
- 11
1
vote
0
answers
1k
views
Unbound forward-zones of subdomains overlap
I have a subdomain (imap) that is accessible from an external network and I have some subdomains (file-drive) that are only accessible form the internal network. I do not have access to the dns-server ...
- 111
0
votes
0
answers
5k
views
unbound.conf server option "private-domain" - domain name ending in a dot nor not?
unbound.conf is used to configure Unbound, a caching DNS resolver. The documentation of version 1.6.8 says:
Server Options
private-domain: <domain name>
Allow this domain, and all ...
- 326
2
votes
1
answer
23k
views
Unbound doesnt start
after installing Unbound
apt-get -y install unbound dnsutils
su -c "unbound-anchor -a /var/lib/unbound/root.key" - unbound
systemctl reload unbound
apt-get -y install resolvconf
echo "nameserver ...
- 23
1
vote
0
answers
2k
views
Unbound DNS: how to ask forwarders only after direct NS query is failed
By default, Unbound DNS server works by "classic" scheme: queries root servers for zone NS records, then queries NS'es for A/AAAA/...
Sometime (rarely) connectivity between my DNS and target NS'es is ...
- 357
2
votes
2
answers
10k
views
unbound forward zone syntax
I want to configure unbound to lookup certain domain names with an alternative dns server, with forward-zone. The documentation I find have two syntaxes:
forward-zone:
name: "mynetwork.com."
forward-...
- 123
2
votes
1
answer
5k
views
Configure LXC to use specific DNS server instead of DNSMASQ
Out of the box, my LXC containers connect to a running instance of dnsmasq, which is started with the lxc-net service.
In my case, I am running a local unbound DNS server that connects to a thing ...
- 213
0
votes
1
answer
554
views
Setup Unbound DNS for both caching/local usage and website ns
I want to use Unbound as caching and as my ns1.domain.com nameserver with DNSSEC.
I came across Unbind which looks quite easy to setup and use.
unbound-control local_data "mywebsite.com A 11.22.3.44"...
- 165
-2
votes
2
answers
868
views
Unbound : what capacity will i need on drive? [closed]
I'm planning to set up my own dns server (for a cybercafe, 30 computers)
what size will unbound need on hdd after months of use ?
Mb, Gb, Tb ?
- 7
1
vote
2
answers
488
views
Are search domains from resolv.conf used only for A/AAAA queries?
Are the user provided search domains from resolv.conf used only for A/AAAA queries ?
Are they used for any other purpose ?
- 229
3
votes
1
answer
6k
views
How to make Unbound block private IPs in resolved domains (DNS rebinding)
I set up Unbound in my local network as a local DNS resolver. I noticed that it will not filter any private IP addresses in the resolved domains and forward any IP address that a domain resolves to.
...
- 1,441
2
votes
1
answer
83
views
How can I prevent unbound from restarting?
I'm running unbound version 1.4.22
Every time I run pon or poff (PPPoE connections) unbound restarts, as seen in the unbound logfile. I easily confirm this is the case by repeating a DNS query that ...
- 61
3
votes
1
answer
3k
views
Unbound Syntax Error
I am trying to use unbound to forward requests to a pair of dns servers, while answering a small hand full of queries locally. In testing this out, I have built the following configuration at /etc/...
- 199
4
votes
2
answers
3k
views
Unbound - domains cached only for short time
I recently set up Unbound for DNS caching, along with DNScrypt on Linux Mint 18.1. It works, but I noticed the pages are cached only for short time:
First query to google.com - 48ms (domain not ...
- 143
3
votes
0
answers
5k
views
Unbound refuses requests from localhost even though `access-control: 127.0.0.1 allow_snoop`
This is my unbound.conf
server:
interface: 0.0.0.0
access-control: 10.0.0.0/8 allow_snoop
access-control: 127.0.0.1 allow_snoop
access-control: 192.168.0.0/16 allow_snoop
...
Reading the ...
- 190
1
vote
1
answer
4k
views
unbound not forwarding query to another recursive DNS server
I'm trying to use unbound to forward DNS queries to other recursive DNS server. My unbound.conf looks like:
forward-zone:
name: "."
forward-addr:x.x.x.x
forward-addr:x.x.x.x
forward-addr:x.x.x.x
But ...
- 899
1
vote
0
answers
818
views
Puppet odd issue - Error 400 on SERVER: Duplicate declaration: Unbound::Record[host.example.com] is already declared in file
Hope someone could help me with my issue )
So, I have several VHost which managed by puppet, including DNS (unbound). One vhost was deleted some time ago and and recreated recently with new IP ...
- 11
4
votes
1
answer
2k
views
Reverse DNS Lookup for 10.* Failing
I am trying to configure NSD and Unbound to handle Internal DNS.
I have everything working for forward look ups but reverse looks ups are failing.
I am not sure what to do next, but looking at the ...
- 41
1
vote
3
answers
3k
views
Resolving route53 private hosted zone cnames internally
We have a DNS server outside of AWS, inside we have route53 with some private hosted zones. I want cnames on the private hosted zones to be available internally (when you access them inside the office)...
- 11
0
votes
0
answers
61
views
Restrict DNS usage to some clients
I firstly asked the question here:
https://networkengineering.stackexchange.com/questions/33948/restrict-dns-usage-to-some-clients
I would like to create a unbound DNS server. I don't have the IP ...
- 167
0
votes
2
answers
12k
views
Public pfSense don't resolve external DNS lookups
I have pfSense with external IP with Unbound DNS Resolver running on it.
When I send inquiry from internal network, it replies, but when I send inquiry from external machine it doesn't reply.
...
- 123