<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
I see. Thanks for that. Is it possible then to configure unbound to exclude dnssec validation for a local domains and do it for all external domains?
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class="">Regards,<br class="">
<div><br class="">
<blockquote type="cite" class="">
<div class="">On Jul 25, 2022, at 8:12 PM, Hugo Salgado <<a href="mailto:hsalgado@vulcano.cl" class="">hsalgado@vulcano.cl</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">192.18.1
is currently delegated, and it has an nsec covering it until 192.18.10. So it could happen that activating validation, unbound is doing aggressive nsec, and answers nxdomain.</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">
<br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">
<span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">Hugo</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">
<br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">
<br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">
<div class="gmail_quote" style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;">
On July 25, 2022 8:38:51 PM GMT-04:00, Peter Fraser via Unbound-users <<a href="mailto:unbound-users@lists.nlnetlabs.nl" class="">unbound-users@lists.nlnetlabs.nl</a>> wrote:
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left-width: 1px; border-left-style: solid; border-left-color: rgb(204, 204, 204); padding-left: 1ex;">
<div class="elementToProof" style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">
<span style="background-color: rgb(255, 255, 255); display: inline !important;" class="">Hi All,</span>
<div style="margin: 0px; background-color: rgb(255, 255, 255);" class="">I would really appreciate some help with this strange problem I am having. I am running unbound 1.16.1 on FreeBSD 13.1 with NSD. I have only one strange problem. I have two subnets on
my network, 192.18.1.0/24 and 192.168.2.0/24. All forward lookups on both subnets are fine but reverse lookups for the 192.18.1.0/24 subnet fails. I notice though that when auto-trust-anchor-file is disabled, it works. Not sure why since none of my zone records
are signed anyway.</div>
<div style="margin: 0px; background-color: rgb(255, 255, 255);" class=""><br class="">
</div>
<div style="margin: 0px; background-color: rgb(255, 255, 255);" class="">The server that unbound is on has IP address is 192.18.1.12. This is my setup below.</div>
<div style="margin: 0px; background-color: rgb(255, 255, 255);" class=""><br class="">
</div>
<div style="margin: 0px; background-color: rgb(255, 255, 255);" class=""><br class="">
</div>
<div style="margin: 0px; background-color: rgb(255, 255, 255);" class="">interface: 192.18.1.12</div>
<div style="margin: 0px; background-color: rgb(255, 255, 255);" class="">do-ip4: yes</div>
<div style="margin: 0px; background-color: rgb(255, 255, 255);" class="">access-control: 0.0.0.0/0 refuse</div>
<div style="margin: 0px; background-color: rgb(255, 255, 255);" class="">access-control: 127.0.0.0/8 allow</div>
<div style="margin: 0px; background-color: rgb(255, 255, 255);" class="">access-control: 192.18.1.0/24 allow</div>
<div style="margin: 0px; background-color: rgb(255, 255, 255);" class="">access-control: 192.168.2.0/24 allow</div>
<div style="margin: 0px; background-color: rgb(255, 255, 255);" class=""><br class="">
</div>
<div style="margin: 0px; background-color: rgb(255, 255, 255);" class="">auto-trust-anchor-file: "/usr/local/etc/unbound/root.key"</div>
<div style="margin: 0px; background-color: rgb(255, 255, 255);" class="">local-zone: "<a href="http://my_domain.net" class="">my_domain.net</a>." nodefault</div>
<div style="margin: 0px; background-color: rgb(255, 255, 255);" class="">local-zone: "168.192.in-addr.arpa." nodefault</div>
<div style="margin: 0px; background-color: rgb(255, 255, 255);" class="">local-zone: "18.192.in-addr.arpa." nodefault</div>
<div style="margin: 0px; background-color: rgb(255, 255, 255);" class=""><br class="">
</div>
<div style="margin: 0px; background-color: rgb(255, 255, 255);" class=""><br class="">
</div>
<div style="margin: 0px; background-color: rgb(255, 255, 255);" class="">stub-zone:</div>
<div style="margin: 0px; background-color: rgb(255, 255, 255);" class=""> name: "<a href="http://my_domain.net" class="">my_domain.net</a>"</div>
<div style="margin: 0px; background-color: rgb(255, 255, 255);" class=""> stub-addr: 192.18.1.12@53000</div>
<div style="margin: 0px; background-color: rgb(255, 255, 255);" class=""><br class="">
</div>
<div style="margin: 0px; background-color: rgb(255, 255, 255);" class="">stub-zone:</div>
<div style="margin: 0px; background-color: rgb(255, 255, 255);" class=""> name: "1.18.192.in-addr.arpa."</div>
<div style="margin: 0px; background-color: rgb(255, 255, 255);" class=""> stub-addr: 192.18.1.12@53000</div>
<div style="margin: 0px; background-color: rgb(255, 255, 255);" class=""><br class="">
</div>
<div style="margin: 0px; background-color: rgb(255, 255, 255);" class="">stub-zone:</div>
<div style="margin: 0px; background-color: rgb(255, 255, 255);" class=""> name: "2.168.192.in-addr.arpa."</div>
<div style="margin: 0px; background-color: rgb(255, 255, 255);" class=""> stub-addr: 192.18.1.12@53000</div>
</div>
</blockquote>
</div>
</div>
</blockquote>
</div>
<br class="">
</div>
</body>
</html>