view common/unbound.conf @ 351:78a9c5946154

Handle DNS64 locally to fix DNSSEC issues Unbound passes a "DO" (DNSSEC Okay) flag to upstream servers, which means they don't synthesise DNS64 entries correctly for some domains. Doing this loses us redundancy (if :82: goes down we're DNS-less until a manual change) but at least we can resolve more DNS now
author IBBoard <dev@ibboard.co.uk>
date Fri, 02 Oct 2020 20:16:04 +0100
parents 1182a180085d
children
line wrap: on
line source

# Based on https://www.nlnetlabs.nl/documentation/unbound/howto-setup/
server:
	interface: 127.0.0.1
	interface: ::1
	access-control: 127.0.0.0/24 allow
	access-control: ::1 allow
        verbosity: 1