Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 15 May 2023 05:09:35 +0000
From:      "Dave Cottlehuber" <dch@skunkwerks.at>
To:        questions@freebsd.org
Subject:   Re: unbound
Message-ID:  <6538db87-9927-4bd9-a837-d66137c933a3@app.fastmail.com>
In-Reply-To: <20230513174552.6d1a05e8@dismail.de>
References:  <20230513053351.6e101f66@dismail.de> <4d7fe7b8-bbd5-e10d-41ee-2b6d46ddb39a@slagle.net> <20230513174552.6d1a05e8@dismail.de>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, 13 May 2023, at 21:45, LuMiWa wrote:
>> > It worked years without problem but this weeks stopped. I remowed
>> > forward-tls... and port 853 and it works again but it is not the
>> > same.
>> > 
>> > Thank you.

What doesn't work, specifically? When you run unbound in the foreground,
do you see any errors?

For debugging, stop local_unbound, add `logfile: ""` to your `server:`
block in unbound.conf, and then run it in foreground:

/usr/sbin/local-unbound -c /var/unbound/unbound.conf -dvvvv

Adjust -v as required.

https://support.quad9.net/hc/en-us/articles/7200715305997-DNS-over-TLS-FreeBSD-with-local-unbound has a full config on their site, which can be summarised as defaults +

forward-zone:
        name: "."
        forward-tls-upstream: yes               # Use DNS-over-TLS
        forward-first: no                       # do NOT send direct

# 9.9.9.9 - Threat-blocking with DNSSEC
        forward-addr: 9.9.9.9@853#dns.quad9.net
        forward-addr: 149.112.112.112@853#dns.quad9.net

A+
Dave



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?6538db87-9927-4bd9-a837-d66137c933a3>