[Unbound-users] Wishlist for unbound-control

[W.C.A. Wijngaards]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Jan-Piet

On 11/07/2011 11:24 AM, Jan-Piet Mens wrote:
>> That was not possible, when I started using unbound. So I went the
>> "Makefile-way"
> 
> Indeed, and a good method that is. :)
> 
> The only reason I started using unbound-control is because that's what
> DNSSEC-trigger uses to configure Unbound's forwarders when it detects
> a network configuration change, e.g. DHCP.
> 
> I then also realized, that I can slip in an insecure resource record
> into a running Unbound -- a functionality I use quite frequently, though
> mainly for testing purposes.
> 
> One missing function (at least for me) is now to be able to quickly add
> an insecure zone on the fly while I'm at a customer site, e.g. example.com.
> 
> (Just a bit of background)

That could be an option to add to unbound-control.

You could do the Makefile-way, then restore the other settings with
dnssec-trigger-control reprobe  (this will restore the unbound forward
stuff).

And unbound-control list_local_data > store_file and then load it again
cat store_file | while read x; do unbound-control local_data "$x" ; done

This is a workaround, and you need to reload the daemon.

Best regards,
   Wouter
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iQIcBAEBAgAGBQJOt8VYAAoJEJ9vHC1+BF+Nov8P/AyvyMpBtowwFKSAn4CmGMdN
IN5JRYZO8GGRNWKot404S5XWelWw94QRmi7oq5bR97FhjpRk0u2c1g3oq+iM9MDg
hn0pKeHDmMSq8oxlMfjv4mdbCJXYC1RyoVOzjjRAtb7h0rUp6M7fnrOJ+RqnGdXH
6jfPFYLvDzKfVgFFbMlX+Oxlw9ieLqbfVgGs3TjZ1X67Q2J65WvaMPeW9vJCIO8X
udeltQe91W8A7LhmnrlYeY8VK/cMzHsNWudigOg6Qc/NtOnHmaEvyHGWhhi+KT33
AsESTUfdZurIm1J8q4H2gnchje0zz4/q794Q0lQ1zTmXR7DqFKxIHebFcmTbZilr
jMTySdv7JoOP7EtsFcs+JJaKZltUKtWPvAMlW/X6sx+szjHOOFGa0OScAuWua8Ro
4R6c8eA7T9V4dAKrVeZshSmSxSTUiLQSP37xpUY4H+5HIdFF+TmMZWWUaNtak8dZ
fCoBL5A8BU7u6/Gpm7r1xefStRGE2peVaU68UVTzsGTWf0YSHTjMYo7JlrzrUCR/
Y0lELiWyUX8JI6QQl+jxFRj/duCptxMz29UuBL85jEIoWgo8lFa5sFY3VhxWv5Ik
Q3CurLZ/xCyQ7as2MJlRqoWx9DCbqwPqVXQgu7M3PnvowuPjcRTgu0BDjMoMkAQ4
UjGTldFMaEpVCR6p8TRn
=Mzbi
-----END PGP SIGNATURE-----