security settings

[Modster, Anthony]

Hello

Using the setup below, how to configure unbound for strict security or not.
Config 1: strict security, do not allow "unsecure and unsigned" resolves to the downstream client ?

Config 2: less secure, allow resolves that are not signed to the downstream client ?

The resolv.conf will contain the "nameserver IP address" for the local host. This is the IP address that unbound daemon uses to monitor DNS client quires.

[strongswan  curl plugin  gethostbyname()]
[unbound daemon  resolv.conf  nameserver  127.0.0.1]







Thanks



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nlnetlabs.nl/pipermail/unbound-users/attachments/20200730/4af58ae0/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.emz
Type: application/octet-stream
Size: 1664 bytes
Desc: image002.emz
URL: <http://lists.nlnetlabs.nl/pipermail/unbound-users/attachments/20200730/4af58ae0/attachment-0002.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.emz
Type: application/octet-stream
Size: 1503 bytes
Desc: image003.emz
URL: <http://lists.nlnetlabs.nl/pipermail/unbound-users/attachments/20200730/4af58ae0/attachment-0003.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.png
Type: image/png
Size: 243 bytes
Desc: image004.png
URL: <http://lists.nlnetlabs.nl/pipermail/unbound-users/attachments/20200730/4af58ae0/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image005.png
Type: image/png
Size: 1685 bytes
Desc: image005.png
URL: <http://lists.nlnetlabs.nl/pipermail/unbound-users/attachments/20200730/4af58ae0/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image006.png
Type: image/png
Size: 2343 bytes
Desc: image006.png
URL: <http://lists.nlnetlabs.nl/pipermail/unbound-users/attachments/20200730/4af58ae0/attachment-0005.png>