[Unbound-users] unbound with a different authoritative server and CNAMEs

[W.C.A. Wijngaards]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Ognen,

On 09/02/2012 05:29 AM, Ognen Duzlevski wrote:
> Hello,
> 
> I have a setup where I use yadifa for an authoritative,
> non-recursive DNS server for a domain (running on machine X).
> 
> I have unbound running on machine Y where I point all my users to
> use as a DNS resolver. The unbound config has a stub section
> pointing all DNS queries for my domain to the machine X and a
> forwarder section for everything else (using "."). The machine X
> that runs the non-recursive, authoritative server (yadifa) has a
> few CNAMEs where something.mydomain.com
> <http://something.mydomain.com> is a CNAME for 
> somehost.someotherdomain.com <http://somehost.someotherdomain.com>.
> I get unbound to return the CNAME (it received from server on
> machine X) correctly but it does not recursively go out and get the
> IP - how do I get it to do that?

You have confused forward-zone and stub-zone.  You need to use
stub-zone, and then unbound will follow CNAMEs.

Best regards,
   Wouter

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQIcBAEBAgAGBQJQRFxNAAoJEJ9vHC1+BF+NFVkP/1/nEnjB96Bcr68lCQxxfhl3
K9t0Sn7cv3g61atthhWEdv/BUm8Fj1eJrOc8g9zg+GZiyN477Rhy78AJFQAoXtI3
VnNWI/F9Zyms64J++7A0wlBhcMGk58O7RYtMVtFlFswXV0K47vVQi0J6o54XZOL8
BFRDJ/KH6hMNg3K2NPcbOHwytZZkfMY+dHb0K+WJVMJUUchyydkGI/ZGu6xtNRsE
0HeUyeamZlw29rZJKl7U3+IoLYbXxxJJqH+LwzjywnGjTdRynEkEC4fkz/ZHQT7m
s5bZELTa5NqM6wZ+4/eDufqQb+WCXsKg4gR5hIfFirOOhirmnSGij9fb+nV7rha7
SWPQ+3zpg9dKg9YjmKSPqBadGhtWTn6D/6J4JkXB4Mgt1HGVgLZ41LaU2UZaVDL4
aN9CAvAR+HMDTiBl9aCNQLVGUp0CyRVfuDJekD6jfB6UkJRRwwmcQgoAvNuKxF4Y
koSXkYRRjO6MO8AnZjR+7p/yVTFpE3CRLv4c0mtvpOwX4ziT9QZZloFtRCPfsttE
xwR6CpzHT9mbkdHjoSRoz71yqKRBJnShrLAmCam+K0gvLR2FGL/HVlz0nTtjGukN
5n7fF+LMB3edAdjojMa1LZ6hvGIFNLj8yKryGjuzpkXU5vyQ/VoEFXEYyr8hn02G
FUV2ZN/CKycuCfRrw4EI
=FpG0
-----END PGP SIGNATURE-----