2022-02-09 17:49:41 -08:00
|
|
|
# Unbound is used primarily for RBL queries (host 2.0.0.127.zen.spamhaus.org)
|
|
|
|
|
# We cannot use dnsmasq because it is not a recursive resolver and defaults to the value in the interfaces file (which is Google DNS!)
|
|
|
|
|
|
2019-11-13 14:48:56 -08:00
|
|
|
server:
|
2020-11-25 10:02:43 -08:00
|
|
|
port: 53
|
2024-04-28 11:18:37 +02:00
|
|
|
interface: 127.0.0.150
|
2020-11-18 11:43:28 -08:00
|
|
|
interface: 172.18.0.1
|
2022-01-26 16:31:30 +01:00
|
|
|
ip-freebind: yes
|
2019-11-13 14:48:56 -08:00
|
|
|
access-control: 127.0.0.1 allow
|
|
|
|
|
access-control: 172.18.0.1/16 allow
|
|
|
|
|
cache-max-negative-ttl: 30
|
|
|
|
|
cache-max-ttl: 300
|
2025-06-28 17:56:09 +02:00
|
|
|
|
|
|
|
|
# Prefer IPv4 outbound queries. Spamhaus often rejects queries from IPv6 addresses
|
|
|
|
|
# without this, unbound does not start on IPv6 only servers
|
|
|
|
|
do-ip6: yes
|
|
|
|
|
# this setting only works with ubuntu 24 and unbound >= 1.19.2
|
|
|
|
|
prefer-ip4: yes
|
|
|
|
|
|
2019-11-13 14:48:56 -08:00
|
|
|
# enable below for logging to journalctl -u unbound
|
|
|
|
|
# verbosity: 5
|
|
|
|
|
# log-queries: yes
|
2022-12-12 22:57:18 +01:00
|
|
|
|
|
|
|
|
# https://github.com/NLnetLabs/unbound/issues/806
|
|
|
|
|
remote-control:
|
|
|
|
|
control-enable: no
|
|
|
|
|
|
