<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=gb2312">
<META NAME="Generator" CONTENT="MS Exchange Server version 14.02.5004.000">
<TITLE>ssl upstream config?</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<P DIR=LTR ALIGN=JUSTIFY><SPAN LANG="en-us"><FONT FACE="Calibri">Hi all,</FONT></SPAN></P>
<P DIR=LTR ALIGN=JUSTIFY><SPAN LANG="en-us"><FONT FACE="Calibri">I am trying to use Unbound</FONT></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri">¡¯</FONT></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri">s SSL upstream</FONT></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri">. Cause I am new to Unbound here, I doubt</FONT></SPAN><SPAN LANG="en-us"> <FONT FACE="Calibri">I might configure them wrong.</FONT></SPAN><SPAN LANG="en-us"> <FONT FACE="Calibri">Both sides use unbound1.5.7</FONT></SPAN></P>
<P DIR=LTR ALIGN=JUSTIFY><SPAN LANG="en-us"><FONT FACE="Calibri">The configuration of</FONT></SPAN><SPAN LANG="en-us"> <FONT FACE="Calibri">Resolver</FONT></SPAN><SPAN LANG="en-us"><FONT FACE="ËÎÌå">£º</FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR ALIGN=JUSTIFY><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Lucida Console">server:</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Lucida Console">directory: "/etc/unbound"</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Lucida Console">username: root</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Lucida Console"># make sure unbound can access entropy from inside the chroot.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Lucida Console"># e.g. on linux the use these commands (on BSD, devfs(8) is used):</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Lucida Console"># mount --bind -n /dev/random /etc/unbound/dev/random</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Lucida Console"># and mount --bind -n /dev/log /etc/unbound/dev/log</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Lucida Console">chroot: "/etc/unbound"</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Lucida Console"># logfile: "/etc/unbound/unbound.log" #uncomment to use logfile.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Lucida Console">pidfile: "/etc/unbound/unbound.pid"</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Lucida Console"># verbosity: 1</FONT><FONT SIZE=2 FACE="Lucida Console"> # uncomment and increase to get more logging.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Lucida Console"># listen on all interfaces, answer queries from the local subnet.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Lucida Console">interface: 0.0.0.0</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Lucida Console">interface: ::0</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Lucida Console">access-control: 10.0.0.0/8 allow</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> </SPAN></P>
<P DIR=LTR ALIGN=JUSTIFY><SPAN LANG="en-us"><FONT FACE="Calibri">The configur</FONT><FONT FACE="Calibri">ation of Forward</FONT></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri">er</FONT></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri">:</FONT></SPAN></P>
<P DIR=LTR ALIGN=JUSTIFY><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Lucida Console"># unbound.conf(5) config file for unbound(8).</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Lucida Console">server:</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Lucida Console">directory: "/etc/unbound"</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Lucida Console">username: root</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Lucida Console"># make sure unbound can access entropy from inside the chroot.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Lucida Console"># e.g. on linux the use these commands (on BSD, devfs(8) is used):</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Lucida Console"># mount --bind -n /dev/random /etc/unbound/dev/random</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Lucida Console"># and mount --bind -n /dev/log /etc/unbound/dev/log</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Lucida Console">chroot: "/etc/unbound"</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Lucida Console"># logfile: "/etc/unbound/unbound.log" #uncomment</FONT> <FONT SIZE=2 FACE="Lucida Console">to use logfile.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Lucida Console">pidfile: "/etc/unbound/unbound.pid"</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Lucida Console"># verbosity: 1 # uncomment and increase to get more logging.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Lucida Console"># listen on all interfaces, answer queries from the local subnet.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Lucida Console">interface: 0.0.0.0</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Lucida Console">interface: ::0</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Lucida Console">access-control: 10.0.0.0/8 allow</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Lucida Console">tcp-upstream: yes</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Lucida Console">ssl-upstream: yes</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Lucida Console">ssl-port: 853</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Lucida Console">forward-zone:</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Lucida Console"> name: "."</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Lucida Console"> forward-addr: 10.4.1.2@853</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Lucida Console">server:</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Lucida Console"> ssl-upstream: yes</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Lucida Console"> tcp-upstream: yes</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Lucida Console"> do-daemonize: no</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Lucida Console"> logfile: ""</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Lucida Console"> verbosity: 10</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Lucida Console">Any help is welcome. Thanks.</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR ALIGN=JUSTIFY><SPAN LANG="en-us"><B></B></SPAN></P>
<P DIR=LTR ALIGN=JUSTIFY><SPAN LANG="en-us"></SPAN></P>
</BODY>
</HTML>