[Unbound-users] as112 trumps stubs?

[John Dickinson]

On 28 May 2008, at 19:25, Robert Edmonds wrote:

>    $ cat /etc/unbound/unbound.conf
>    [...]
>    stub-zone:
>            name: "30.172.in-addr.arpa"
>            stub-addr: 172.30.20.243
>            stub-addr: 172.30.20.244
>    [...]
>
> yet, I get back the built-in as112 content:
>
>    $ dig +short soa 30.172.in-addr.arpa
>    localhost. nobody.invalid. 1 3600 1200 604800 10800
>
> I don't think the built-in content should arrive explicitly configured
> stub zones?

I think you need to add

local-zone: "30.172.in-addr.arpa." nodefault

to the config in order to get normal resolution and hit the stub-zone,  
because you are defining a stub-zone instead of a local-zone to  
replace the built-in. However, nodefault doesn't appear to do  
anything. It looks to me like a typo in services/localzone.h - a patch  
like this helps

diff -ru unbound-1.0.0/services/localzone.h unbound-1.0.0-working/ 
services/localzone.h
--- unbound-1.0.0/services/localzone.h	2007-11-22 13:48:58.000000000  
+0000
+++ unbound-1.0.0-working/services/localzone.h	2008-05-28  
22:44:26.000000000 +0100
@@ -66,7 +66,7 @@
  	local_zone_redirect,
  	/** remove default AS112 blocking contents for zone
  	 * nodefault is used in config not during service. */
-	local_zone_nodefault
+	local_zones_nodefault
  };

  /**


Alternatively adding this seems to work as well
local-zone: "30.172.in-addr.arpa." transparent

HTH
John

---
John Dickinson