<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">Thanks Dustin, <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">But how do I forward the requests for this local-zone to the DNS resolver for the VPC “10.24.32.2” should I add the following:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Stub-zone:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> Stub-addr: 10.24.32.2<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Thus having the configuration below:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal">private-address: 10.24.32.0/24<o:p></o:p></p>
<p class="MsoNormal">local-zone: "32.24.10.in-addr.arpa." nodefault<o:p></o:p></p>
<p class="MsoNormal">Stub-zone:<o:p></o:p></p>
<p class="MsoNormal"> Stub-addr: 10.24.32.2<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks, <o:p></o:p></p>
<p class="MsoNormal">Raed.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><b>From:</b> Dustin Marquess [mailto:dmarquess@gmail.com] <br>
<b>Sent:</b> Wednesday, October 05, 2016 5:55 PM<br>
<b>To:</b> Nashef, Raed H <RNASHEF@beckman.com>; unbound-users@unbound.net<br>
<b>Subject:</b> Re: in-add.arpa<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div id="compose">
<div>
<p class="MsoNormal">Add:<span style="font-size:12.0pt"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">private-address: 10.24.32.0/24<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">local-zone: "32.24.10.in-addr.arpa." nodefault<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">-Dustin<o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt">_____________________________<br>
From: Nashef, Raed H via Unbound-users <<a href="mailto:unbound-users@unbound.net">unbound-users@unbound.net</a>><br>
Sent: Wednesday, October 5, 2016 6:51 PM<br>
Subject: in-add.arpa<br>
To: <<a href="mailto:unbound-users@unbound.net">unbound-users@unbound.net</a>><br>
<br>
<span style="font-size:12.0pt;font-family:"Times New Roman",serif"><o:p></o:p></span></p>
<p class="MsoNormal">Hello all, <o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">I’m using unbound as a DNS forwarder between on premise DNS and AWS private hosted zone. In Route53, I have 32.24.10.in-addr.arpa zone. I need to have unbound forward reverse DNS requests to this hosted zone.<o:p></o:p></p>
<p class="MsoNormal">The VPC IP for example is 10.24.32.0, the AWS name server is always plus two “10.24.32.2”. In unbound.conf I’ve tried the following and it does not work:<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">server:<o:p></o:p></p>
<p class="MsoNormal"> interface: 0.0.0.0<o:p></o:p></p>
<p class="MsoNormal"> access-control: 0.0.0.0/0 allow<o:p></o:p></p>
<p class="MsoNormal">forward-zone:<o:p></o:p></p>
<p class="MsoNormal"> name: "."<o:p></o:p></p>
<p class="MsoNormal"> forward-addr: 10.24.32.2<o:p></o:p></p>
<p class="MsoNormal">forward-zone:<o:p></o:p></p>
<p class="MsoNormal"> name: "32.24.10.in-addr.arpa"<o:p></o:p></p>
<p class="MsoNormal"> forward-addr: 10.24.32.2<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">Thanks,<o:p></o:p></p>
<p class="MsoNormal">Raed<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-size:12.0pt;font-family:"Times New Roman",serif">Please be advised that this email may contain confidential information. If you are not the intended recipient, please notify us by email by
replying to the sender and delete this message. The sender disclaims that the content of this email constitutes an offer to enter into, or the acceptance of, any agreement; provided that the foregoing does not invalidate the binding effect of any digital or
other electronic reproduction of a manual signature that is included in any attachment.<o:p></o:p></span></p>
</div>
</div>
Please be advised that this email may contain confidential information. If you are not the intended recipient, please notify us by email by replying to the sender and delete this message. The sender disclaims that the content of this email constitutes an offer
to enter into, or the acceptance of, any agreement; provided that the foregoing does not invalidate the binding effect of any digital or other electronic reproduction of a manual signature that is included in any attachment.
</body>
</html>