Unbound with custom forward zone

Flipchan flipchan at riseup.net
Sun Jul 28 21:37:10 UTC 2019


Hey everyone,
im struggeling to get unbound to forward to my local nsd and to external hosts , it works when i have only one forward zone for my internal .testing records but when i put a forward-zone: name: "." , it ignores my other forward-zone

I got the base conf from here:

https://jonwillia.ms/2018/09/23/anycast-dns-openbsd (github.com/bongozone/kibble)

I am running in it On openbsd 6.5 with unbound 1.9.1

Does anyone know how this could be done ? I have nsd running the zone records for .testing and it works when i only have the .testing forward-zone in the unbound.conf , does anyone know what im doing wrong ? 

ns0# cat /var/unbound/etc/unbound.conf

# $OpenBSD: unbound.conf,v 1.7 2016/03/30 01:41:25 sthen Exp $

server:
    interface: 127.0.0.1
    #interface: ::1
    do-ip6: no

    access-control: 0.0.0.0/0 refuse
    access-control: 127.0.0.0/8 allow
    access-control: 192.168.0.0/16 allow

    access-control: ::0/0 refuse
    access-control: ::1 allow

    hide-identity: yes
    hide-version: yes


remote-control:
    control-enable: yes
    control-use-cert: no
    control-interface: /var/run/unbound.sock

# Use an upstream forwarder (recursive resolver) for specific zones.
#

forward-zone:
    name: "testing."
        forward-addr: 127.0.0.1 at 5353 # to nsd daemon

forward-zone:
    name: "."                # use for ALL queries
    forward-addr: 1.1.1.1
    forward-addr: 74.82.42.42
    forward-addr: 2001:470:20::2
    forward-addr: 208.67.222.222
    forward-first: yes

-- 
Sincerely flipchan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nlnetlabs.nl/pipermail/unbound-users/attachments/20190729/772f7ce6/attachment.htm>


More information about the Unbound-users mailing list