From owner-freebsd-hackers@FreeBSD.ORG  Mon Dec  2 12:56:59 2013
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
Delivered-To: freebsd-hackers@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id 46D98157
 for <freebsd-hackers@freebsd.org>; Mon,  2 Dec 2013 12:56:59 +0000 (UTC)
Received: from olymp.kibab.com (olymp.kibab.com [5.9.14.202])
 by mx1.freebsd.org (Postfix) with ESMTP id 04E66112A
 for <freebsd-hackers@freebsd.org>; Mon,  2 Dec 2013 12:56:58 +0000 (UTC)
DKIM-Filter: OpenDKIM Filter v2.8.3 olymp.kibab.com CFC6F3F44A
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=kibab.com; s=default;
 t=1385989010; bh=ZyLVuRqmzQzcQ/5A129AkYCOayExFeivrRVYTateGjQ=;
 h=Date:From:To:Cc:Subject:In-Reply-To:References;
 b=j0WD5avO29MWiyykD+ZxjDhjjRjrsfg37RUPvB3XmUBexC1Ez8NuE1tb4oGfL7Byw
 4pkuRqkUakKzH4prUIChH8olmeiykkhWNCBrG3dr1Y40KzwmmqMoU3IHeoPNkqddBS
 FZySxnsKTQoTaMl3GyZEFR5Z/Ul5Vr2glQdtEnPY=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8;
 format=flowed
Content-Transfer-Encoding: 7bit
Date: Mon, 02 Dec 2013 13:56:50 +0100
From: Ilya Bakulin <webmaster@kibab.com>
To: Darren Pilgrim <list_freebsd@bluerosetech.com>
Subject: Re: unbound-control in FreeBSD-CURRENT and stable/10
Organization: Deglitch Networks
In-Reply-To: <5298EA83.30705@bluerosetech.com>
References: <20131129142143.GA29437@olymp.kibab.com>
 <20131129142729.GA29580@olymp.kibab.com> <5298EA83.30705@bluerosetech.com>
Message-ID: <7507eb85a259cbb96c232625bb883460@mail.bakulin.de>
X-Sender: webmaster@kibab.com
Cc: freebsd-hackers@freebsd.org
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Technical Discussions relating to FreeBSD
 <freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-hackers>, 
 <mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers/>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
 <mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 02 Dec 2013 12:56:59 -0000

On 2013-11-29 20:26, Darren Pilgrim wrote:
> On 11/29/2013 6:27 AM, Ilya Bakulin wrote:
> 
> There's really no bug to fix.  The base has unbound in it,
> unbound-control is part of unbound.  If you install unbound from
> ports, you should delete unbound from base.  I haven't tried out 10.x
> yet, but you usually just set a knob like WITHOUT_UNBOUND in
> /etc/src.conf, then do:
Why on earth I should rebuild the whole system just to get rid of 
Unbound? Actually Unbound in base should be used only as a DNSSEC-aware 
resolver for the localhost, not as "real" DNS server. Just like BIND 
used to be earlier. You haven't recompiled the system (and lost 
freebsd-update!) when installing BIND from ports, have you?

> Change your PATH to have /usr/local/bin and /usr/local/sbin first.
> The shell will find /usr/local/bin/unbound-control first and run that.
>  I recommend this in general, since you pretty much always want a name
> collision to prefer the from-ports program.

This sounds a lot better, although then I don't understand why the 
system is not shipped with this setting by default.