Questions tagged [unbound]

Unbound is an open-source DNSSEC validating DNS resolver.

Filter by
Sorted by
Tagged with
1 vote
1 answer
125 views

unbound DNS without recursive

I want to configure the unbound DNS for the domain e.g. domain.com in a way that it only answers for *.domain.com and rest of any query like gmail.com or hotmail.com are refused. I have following ...
AAB's user avatar
  • 13
-1 votes
1 answer
172 views

Docker Container DNS slow (~ 4 seconds) with DNS resolver as container

DNS resolution inside all of my Docker containers is consistently slow (slightly more than 4 seconds). From the host, DNS queries are fast, as well as on the rest of my network. I must admit I did not ...
DeBaum's user avatar
  • 1
0 votes
0 answers
143 views

Unbound configuration for DNSBL service

We have a few SpamAssassin servers that are connected to a local DNS server that runs Unbound. The purpose of this is to cache some queries that we makes toward services such as SpamHaus, URIBL and ...
Cyril N.'s user avatar
  • 624
2 votes
1 answer
1k views

Automate renewal of let's encrypt ACME-DNS challenge with unbound

I changed from a certificate with multiple explicitly defined subdomains to a wildcard certificate. For this to work, the DNS-01 challenge needs to be solved. I have a very basic unbound DNS server ...
Amon Bune's user avatar
0 votes
0 answers
128 views

Have unbound forwarding requests for all clients, except for a single one where it should recurse itself

I use unbound as caching and forwarding name server for my local network. That means that all requests which cannot be answered out of the cache are forwarded to an "upstream name server" – ...
Izzy's user avatar
  • 349
0 votes
0 answers
401 views

pi-hole/unbound as internal DNS server

Last week I set up Pi-hole mainly for blocking ads and handling a few internal DNS requests. This works fine, when OCD kicked in. I thought it would be nice to add Unbound to the mix to not have to ...
vespino's user avatar
  • 111
0 votes
1 answer
380 views

RCVD_IN_DNSWL_BLOCKED in SpamAssassin as it doesn't use local DNS

I'm not sure what I have wrong here. It used to work on Ubuntu 18.04, but doesn't on 20.04 it seems. I have unbound DNS server setup: unbound-control status version: 1.9.4 verbosity: 1 threads: 1 ...
Andrew Newby's user avatar
  • 1,124
0 votes
0 answers
62 views

Unbound query high response time for some domains

I'm running unbound version 1.17.0 on FreeBSD 12.2, For unknow reason I have high query response time for some domains. For example when I run the query for "OKR.com" it takes around 4 ...
Zareh Kasparian's user avatar
0 votes
0 answers
280 views

powerdns-recursor responds with SERVFAIL while others respond with NOERROR

while debugging some weird Cisco telephony server issue we discovered the following behaviour: pdns-recursor on current debian-stable: dig smartreceiver.cisco.com AAAA ; <<>> DiG 9.16.33-...
foax's user avatar
  • 23
1 vote
1 answer
600 views

Unbound as a caching intermediate server is slow, and doing more than what I need

What I need A forwarding DNS server as an intermediry to another DNS server that serves expired records and renews its cache later. Problem I tried to use unbound as the only software that I've found ...
Masood Lapeh's user avatar
0 votes
0 answers
101 views

Unbound wildcard with exclusion that goes up stream

I have a use case where I need to map an entire domain (dev.example.com as an example) to a specific computer on the network that unbound is looking for. Except for let's encrypt txt records which I ...
James Hancock's user avatar
1 vote
1 answer
469 views

redirect outgoing dns queries to localhost using iptables

Problem There are some outgoing TCP DNS requests in my Ubuntu server that I couldn't control them to be resolved by Unbound on 127.0.0.1:53 which uses 208.67.222.222 to resolve everything, and I see ...
Masood Lapeh's user avatar
0 votes
1 answer
315 views

Investigate huge recursion delay with Unbound

I am running a recursive DNS resolver with unbound 1.9.0 on Debian Stretch. It periodically logs statistics about the recursion procession times. The latest is: [2195:0] info: server stats for thread ...
user2233709's user avatar
  • 1,384
2 votes
0 answers
141 views

When does unbound fully drop expired cache

How long it will hold expired cache before dropping it? Is there any way to prefetch expired cached instead of dropping it?
zer09's user avatar
  • 133
0 votes
1 answer
781 views

How to whitelist domain in Unbound

I know that sometimes false positive can happen when using public blocklists, that way I want to import/create whitelist to make sure not to block them. I've already checked manual from Unbound and ...
user134969's user avatar
0 votes
1 answer
105 views

Putting a caching nameserver in front of ad

I would like to set up a caching nameserver to meet some requirements in the datacenter. Some of these requirements make me to put this caching nameserver between my servers and AD (e.g. collecting ...
Çiçek Adam's user avatar
0 votes
0 answers
459 views

Unbound DNS (Redirection of LAN)

I'm trying to redirect my LAN queries to local DNS server (installed in LAN) instead of default DNS ie 8.8.8.8. I'm using unbound 1.13.1 and tried the following: tried localzone local-zone: "10....
Akshay's user avatar
  • 9
0 votes
0 answers
318 views

Centos - Unbboud and URIBL_BLOCKED blacklist

I am facing the following problem: My websites have contact forms. People reach out to me via contact form. I receive 1 email after every contact form sent. Since about 1 week Ms Outlook is marking my ...
Pikk's user avatar
  • 339
4 votes
1 answer
2k views

Understanding how Unbound listen on Port 53

I have installed unbound on Debian Buster. Now I wonder why unbound listens 2 times on each Protocol. netstat -tulpn tcp 0 0 0.0.0.0:53 0.0.0.0:* LISTEN ...
Gill-Bates's user avatar
2 votes
1 answer
3k views

DNS - Unbound - How to provide different IP for a server based on client network

We have an intranet DNS server using Unbound in FreeBSD. We have another file server with multiple network IP, First one is 10.10.10.10 and Second one in 192.168.10.10. Is there any way that DNS ...
iamsumesh's user avatar
  • 145
1 vote
1 answer
554 views

Can't Receive Email - Postfix iRedMail Server Using Spamhaus & Unbound / BIND9 DNS Servers

iRedMail server configured using ISP's DNS servers. Running several years without issue. Moving from current ISP to Starlink. It appears Starlink uses Cloudflare's public DNS. Currently have both ISPs ...
BigPines's user avatar
5 votes
2 answers
4k views

How does unbound handle multiple forwarders (forward-addr)?

According to https://nlnetlabs.nl/documentation/unbound/unbound.conf/ multiple forwarders can be configured with forward-addr For the forward zone this list of nameservers is used to forward the ...
Hannes's user avatar
  • 307
1 vote
0 answers
238 views

how to make unbound hold many queries for non cached address to cache it first

I am looking for a way to make unbound hold queries for the same address lookup when it is not cached. It should let only one query to be processed, after that answer cached it can reply other queries ...
Çiçek Adam's user avatar
1 vote
2 answers
273 views

Unbound sends recursive queries from default gateway

I am looking for an option that will make unbound to send recursive queries from a specific interface. Listening interface is easy, but I can't find asking interface option. I have 3 interfaces on my ...
Çiçek Adam's user avatar
0 votes
1 answer
3k views

Unbound error - unbound.service: Start request repeated too quickly

I am new using unbound. I have a network 192.168.50.1 to 192.168.50.240. And I'd like to use DoH for non cache data. my conf file: # Unbound configuration file for Debian. # # See the unbound.conf(5) ...
RGS's user avatar
  • 101
2 votes
1 answer
817 views

Unbound block list , How to know from query log that if domain blocked or not?

I have configured an Unbound server with domain block list, blocking works perfectly fine. But from the query log, i can only see that blocked domain is queried, that's it. I tired with server: local-...
James Arems's user avatar
0 votes
0 answers
864 views

Unbound not returning A records over IPv6

I recently replaced my pfSense installation with OPNsense and have been struggling a bit with the Unbound installation. In short, it's IPv6 enabled and everything works well (both IPv6 and IPv4) in ...
vpetersson's user avatar
1 vote
1 answer
842 views

Runing unbound doh behind nginx

I'm trying to run unbound DoH behind nginx but I'm getting a 502 Bad Gateway error. In nginx log I have the following message: 2021/03/25 08:54:49 [error] 10052#10052: *1 upstream prematurely closed ...
kuroneko's user avatar
  • 121
2 votes
0 answers
4k views

Bind9 vs Unbound. Which is better for VPN node and why?

I am currently in the process of developing a VPN service. One of the necessary things for a proper VPN node is a DNS server that will prevent DNS leaks, and whilst working on this project I stumbled ...
hancack's user avatar
  • 21
0 votes
0 answers
3k views

Fallback to forwarding with Unbound?

I'm using Unbound on an internal network What I want it to do is as follows: If a local_zone matches, return from there If not and it matches the internal domain name, then try forwarding to Consul ...
starbeamrainbowlabs's user avatar
1 vote
1 answer
2k views

Unbound doesn't accept answer from non-DNSSEC forward rule

Unbound gets the right answer (see below) from a forward-zone, but proceeds to ignore it and try to query other DNS servers. I'm running unbound (1.10.0) on a docker image when behind a public ...
shil88's user avatar
  • 121
2 votes
1 answer
3k views

Unbound can't seem to read certificate files for DNS-over-TLS, gets "Permission denied"

I'm trying to set up DNS-over-TLS (DoT) with unbound resolver. i.e. I'm trying to encrypt the connection between the client and unbound I'm NOT trying to encrypt the unbound resolver → upstream ...
hayalci's user avatar
  • 3,631
0 votes
1 answer
610 views

Measuring/monitoring Unbound Resolver Performance

I am running Unbound resolver on FreeBSD, and i am looking for a solution to measure its performance.sometimes there are some delays in regard of resolving domain names,and my customers are ...
Zareh Kasparian's user avatar
2 votes
0 answers
2k views

Unbound DNS Partial Authority of Zone

There is a public domain registered by somebody on the Internet. Let's say "example.com". I need my Unbound server to be partially authoritative for the zone "example.com" for my internal client ...
Erica993's user avatar
1 vote
1 answer
707 views

unbound periodically stops working

I have been using unbound as a caching DNS server forwarding to dnscrypt-proxy and it was working relatively well for a while (years, although about a year or so with dnscrypt-proxy) requiring no ...
Walter's user avatar
  • 243
1 vote
0 answers
5k views

Dig +trace not working, while +notrace works

I am trying to troubleshoot some DNS issues and I am starting by trying to trace my DNS lookups using dig +trace. Im getting some weird results. If do a normal dig to my unbound resolver. dig @192....
Marc Henning's user avatar
0 votes
2 answers
3k views

unbound.service service unit slow start/restart on 1 VM and fast on another

I am debugging an issue with Unbound (DNS Resolver software) on CentOS Linux release 7.5.1804 (Core). I have 2 VMs in different environments that are supposedly running the same Unbound software. [...
Subzero123's user avatar
1 vote
0 answers
2k views

Unbound config to forward unknow local subdomain name

I am currently on a local aera network where no loop-back is allowed meaning that I cannot reach my public IP address from the local network. Several services need to be migrated in my local area ...
Gazoline's user avatar
1 vote
0 answers
2k views

Unbound forward-zones of subdomains overlap

I have a subdomain (imap) that is accessible from an external network and I have some subdomains (file-drive) that are only accessible form the internal network. I do not have access to the dns-server ...
Charlie's user avatar
  • 111
2 votes
1 answer
6k views

unbound.conf server option "private-domain" - domain name ending in a dot nor not?

unbound.conf is used to configure Unbound, a caching DNS resolver. The documentation of version 1.6.8 says: Server Options private-domain: <domain name> Allow this domain, and all ...
Fabian's user avatar
  • 397
2 votes
1 answer
28k views

Unbound doesnt start

after installing Unbound apt-get -y install unbound dnsutils su -c "unbound-anchor -a /var/lib/unbound/root.key" - unbound systemctl reload unbound apt-get -y install resolvconf echo "nameserver ...
Aeris's user avatar
  • 123
1 vote
0 answers
2k views

Unbound DNS: how to ask forwarders only after direct NS query is failed

By default, Unbound DNS server works by "classic" scheme: queries root servers for zone NS records, then queries NS'es for A/AAAA/... Sometime (rarely) connectivity between my DNS and target NS'es is ...
user2743554's user avatar
3 votes
2 answers
14k views

unbound forward zone syntax

I want to configure unbound to lookup certain domain names with an alternative dns server, with forward-zone. The documentation I find have two syntaxes: forward-zone: name: "mynetwork.com." forward-...
egwene sedai's user avatar
4 votes
1 answer
5k views

Configure LXC to use specific DNS server instead of DNSMASQ

Out of the box, my LXC containers connect to a running instance of dnsmasq, which is started with the lxc-net service. In my case, I am running a local unbound DNS server that connects to a thing ...
jcarpenter2's user avatar
0 votes
1 answer
671 views

Setup Unbound DNS for both caching/local usage and website ns

I want to use Unbound as caching and as my ns1.domain.com nameserver with DNSSEC. I came across Unbind which looks quite easy to setup and use. unbound-control local_data "mywebsite.com A 11.22.3.44"...
Jeremy Dicaire's user avatar
-2 votes
2 answers
1k views

Unbound : what capacity will i need on drive? [closed]

I'm planning to set up my own dns server (for a cybercafe, 30 computers) what size will unbound need on hdd after months of use ? Mb, Gb, Tb ?
cyrianox's user avatar
1 vote
2 answers
628 views

Are search domains from resolv.conf used only for A/AAAA queries?

Are the user provided search domains from resolv.conf used only for A/AAAA queries ? Are they used for any other purpose ?
Manohar's user avatar
  • 229
3 votes
1 answer
7k views

How to make Unbound block private IPs in resolved domains (DNS rebinding)

I set up Unbound in my local network as a local DNS resolver. I noticed that it will not filter any private IP addresses in the resolved domains and forward any IP address that a domain resolves to. ...
comfreak's user avatar
  • 1,501
2 votes
1 answer
146 views

How can I prevent unbound from restarting?

I'm running unbound version 1.4.22 Every time I run pon or poff (PPPoE connections) unbound restarts, as seen in the unbound logfile. I easily confirm this is the case by repeating a DNS query that ...
Josh's user avatar
  • 61
3 votes
1 answer
4k views

Unbound Syntax Error

I am trying to use unbound to forward requests to a pair of dns servers, while answering a small hand full of queries locally. In testing this out, I have built the following configuration at /etc/...
TheWellington's user avatar