[Unbound-users] let unbound query other nameservers

[W.C.A. Wijngaards]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi Andreas,

On 24/11/14 11:17, A. Schulze wrote:
> Hello,
> 
> I like to configure unbound to not talk to a nameserver listed in
> DNS but to my own. I don't know the domainnames, but I can tell
> these domains are hosted at server ns.example.com for example.
> 
> Wish: every time unbound try to query ns1.example.org while
> resolving a domain it must not talk to this server but my server
> and use my answers.

This is not a normal feature.

But you can try this tricky setup: set a private-address config on the
public-IP address of ns.example.com (the /32 version of the normal IP4
of that nameserver), which makes unbound remove that address.  Add a
forward-zone for name: "ns.example.com" to another unbound instance
that has the local-data statement for ns.example.com.

Best regards,
   Wouter

> I tried to add a local-data in unbound.conf
> 
> server: local-data: "ns.example.com. A 192.168.1.1"
> 
> @192.168.1.1 there is a nsd answering the questions in the way I
> like.
> 
> But that does not work. Looks like unbound learn the ip address of
> the given label from authoritative answers and use it instead my
> static entry.
> 
> Is $WISH possible at all?
> 
> Thanks, Andreas
> 
> 
> _______________________________________________ Unbound-users
> mailing list Unbound-users at unbound.net 
> http://unbound.nlnetlabs.nl/mailman/listinfo/unbound-users

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=dr4k
-----END PGP SIGNATURE-----