RPZ Unbound

[Nguyễn Văn Trí]

Hi,
Here are the unbound.conf file & log error:
1. Unbound.conf
server:
        directory: "/etc/unbound"
        logfile: /var/log/unbound/unbound.log
        pidfile: /var/run/unbound.pid
#       access-control: 127.0.0.0/8 allow
        access-control: ::0/0 allow
        access-control: 0.0.0.0/0 allow
#       access-control: 2001:19f0:5:3c01:5400:3ff:fe87:a/64 allow
        interface: 127.0.0.1
        interface: ::1
        interface: 0.0.0.0
        port: 53
        do-ip4: yes
        do-ip6: yes
        do-tcp: yes
        do-udp: yes
        verbosity: 1
        log-queries: yes
        hide-identity: yes
        hide-version: yes
#        auto-trust-anchor-file: "/var/lib/unbound/root.key"



        module-config: "validator python iterator"
        module-config: "respip validator iterator"
#        chroot: ""

        statistics-interval: 0
        extended-statistics: yes
        statistics-cumulative: no

python:
       python-script: "/etc/unbound/nxredirect.py"

rpz:
       name: trinv.com
       master: 192.0.0.2

2. Log errors
Oct 16 10:29:56 ip-172-32-10-82 systemd[1]: Stopped Unbound DNS server.
Oct 16 10:29:56 ip-172-32-10-82 systemd[1]: Starting Unbound DNS server...
Oct 16 10:29:57 ip-172-32-10-82 package-helper[50489]:
/var/lib/unbound/root.key has content
Oct 16 10:29:57 ip-172-32-10-82 package-helper[50489]: success: the anchor
is ok
Oct 16 10:29:57 ip-172-32-10-82 unbound[50490]:
/etc/unbound/unbound.conf:36: error: unknown keyword 'rpz'
Oct 16 10:29:57 ip-172-32-10-82 unbound[50490]:
/etc/unbound/unbound.conf:36: error: stray ':'
Oct 16 10:29:57 ip-172-32-10-82 unbound[50490]:
/etc/unbound/unbound.conf:37: error: syntax error
Oct 16 10:29:57 ip-172-32-10-82 unbound[50490]: read
/etc/unbound/unbound.conf failed: 3 errors in configuration file
Oct 16 10:29:57 ip-172-32-10-82 unbound[50490]: [1634380197]
unbound[50490:0] fatal error: Could not read config file:
/etc/unbound/unbound.conf. Maybe try unbound -dd, it stays on the
commandline to see more errors, or unbound-checkconf
Oct 16 10:29:57 ip-172-32-10-82 systemd[1]: unbound.service: Main process
exited, code=exited, status=1/FAILURE
Oct 16 10:29:57 ip-172-32-10-82 systemd[1]: unbound.service: Failed with
result 'exit-code'.
Oct 16 10:29:57 ip-172-32-10-82 systemd[1]: Failed to start Unbound DNS
server.

Plz help me to fix it.
Thanks & Best Regards,



*Nguyen Van Tri*
*Da Nang - Viet Nam*
*Tel: 0974 919 037*
*Email: nguyenvantri.10dt3 at gmail.com <nguyenvantri.10dt3 at gmail.com>*


On Sat, Oct 16, 2021 at 5:26 PM Jaap Akkerhuis <jaap at nlnetlabs.nl> wrote:

>  Nguyễn Văn Trí writes:
>
>  > 2. Unbound-checkconf
>  > # unbound-checkconf /etc/unbound/unbound.conf
>  > /usr/local/etc/unbound/var/log/unbound: No such file or directory
>  > [1634376986] unbound-checkconf[50224:0] fatal error: logfile directory
> does
>  > not exist
>  >
>  > But still can not start unbound with RPZ.
>
> You aparently changed stuff you don't tell about. I cann not help you this
> way.
>
>         jaap
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nlnetlabs.nl/pipermail/unbound-users/attachments/20211016/2d9a4884/attachment-0001.htm>