[Unbound-users] [wishlist] unbound vs djbdns

[W.C.A. Wijngaards]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Richard, Ondrej,

On 06/14/2011 09:44 AM, Ondřej Surý wrote:
> On Mon, Jun 13, 2011 at 21:38, richard lucassen
> <mailinglists at lucassen.org> wrote:
>> Hello list,
>>
>> [...]
>> Into the config file. This is not so much work, but if there are many of
>> these entries...
> 
> Then you just use a shell script to generate the config? I don't think
> that unbound needs a feature which can be accomplished by simple shell
> or awk script:
> 
> cd /etc/unbound/stub-zones;
> for domain in *; do < $domain awk 'BEGIN { print "stub-zone:\n\tname:
> \"'${domain}'\""; } { print "\tstub-host: \""$0"\""; } END { print "";
> }'; done > /etc/unbound/stub-zones.conf
> 
> and add
> 
> include: "/etc/unbound/stub-zones.conf"
> 
> to your unbound.conf

Yes, you can also do echo "stub-zone: name: $name stub-host: $svr" >>
/etc/unbound/stub-zones.conf  and then include that file in
unbound.conf.  So, it can be on one line without quotes (no spaces in
names) and that is a very simple shellscript line.

For the log file with queries have you thought about this:
tcpdump -i xl0 dst port domain and "(" dst host [your-resolver-IP] or
dst host [your-resolver-IP6] ")"
(and with -f or -m to make it print numerically, otherwise it will
perform (reverse) DNS lookups to log your DNS lookups ... )

tcpdump has options, but if you want more, then perhaps dnstop (tcpdump
with some nicer statistics output):
http://dns.measurement-factory.com/tools/dnstop/index.html (and there
are a lot of other tools).

Since you like to keep up, have you seen that unbound has a munin (and
cacti) plugin for statistics gathering?

Best regards,
   Wouter
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iQIcBAEBAgAGBQJN9xiCAAoJEJ9vHC1+BF+N/wcP/AmDFARSIQbVttJgpdz8bQbQ
kwtXQaQxcQBXI5uJ79i9THF1edmKKbqaMWV3t3NuP/H0CDd6jRu768K0hpMb3/Ks
f5TVSO0x0qXhxEUVyUpSgyFRE9qtiM1yx5ummn63tWtycl9nzNImahlhP0fXx/mq
eec9KOPfuptBU2RYgYHVqwXDErOgERIF/ozlCGRBIp3n9q2WSoeE0PtnZWFFpjJi
MLZ+AKxE59TLNQH5Irxvs9HL01Xq3om7U4HX25bTD2fnMGtfLx4beNuN+4AOkpGA
IuvoU1VqcBDDecEGt9aUi2dZvpfudbxi8qqnhap9ldjzXGvwWcjhEtZ/mQb/r04m
zKymPbSeVhpms2NUiq+mI36S+BQ1gknVSfusR83ElsBe4hUkTzGhKvrQ6zlZe+uJ
KPbakymCmlVjgBmn75JHYoPNjY09cJXXELUkppb6deMAQZfPbUqapgftqODAeCg2
nwve2YrwoaYtLfangXWJgzNArmozShaW0u3+eB47lzfRXsDLVfkb29K8Dd3dekWj
5QfS0iKlQqoqqC4Hgv5etqn1sJIQUqtavj3xVoK6/jFznXS3+nG04nMpkcwDaOoW
DwLy9OeifdlLjJrD8nAxEpSzAQRQm1ybB8F2dFPPiu2DLYWYDID4fi/7dJA4yhjP
V1BDVU0PaBRFhgKIeqXC
=cwaZ
-----END PGP SIGNATURE-----