blob: f79b9c364fe222ae27b642710718cf585c86845e (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
|
# Don't allow unbound-control
remote-control:
control-enable: no
server:
logfile: /dev/stdout
# Refresh expiring cache entries, if less than 10% of their TTL remains
prefetch: yes
# Serve stale data if not older than 1 day
serve-expired: yes
serve-expired-ttl: 86400 # one day, in seconds
# Timeout request and serve stable data if it takes longer than 1.8 seconds
serve-expired-client-timeout: 1800 # 1.8 seconds, in milliseconds
# Some logging to see what is going on
verbosity: 2
log-queries: yes
interface: 0.0.0.0
# interface: ::0
port: 5353
# Who can use our Unbound server
# access-control: 127.0.0.1/8 allow
# access-control: ::1/64 allow
# access-control: 192.168.0.1/16 allow
access-control: 10.42.0.0/16 allow
# access-control: 10.43.0.0/16 allow
do-ip4: yes
#do-ip6: yes
do-udp: yes
do-tcp: yes
# Certificates
tls-cert-bundle: /etc/ssl/certs/ca-certificates.crt
# private-domain: "bing.c-137.space"
# Ad-blocking, leave this commented out for now...
#include: /etc/unbound/adservers.conf
# Local zone entries should be transparent
local-zone: "lan.uctrl.net." transparent
local-zone: "168.192.in-addr.arpa." transparent
#include: /etc/unbound/host_entries.conf
# Forward all queries to Quad9 and CloudFlare, with DNS over TLS
forward-zone:
name: "."
forward-tls-upstream: yes
# Quad9
#forward-addr: 2620:fe::fe@853#dns.quad9.net
forward-addr: 9.9.9.9@853#dns.quad9.net
#forward-addr: 2620:fe::9@853#dns.quad9.net
forward-addr: 149.112.112.112@853#dns.quad9.net
# Cloudflare DNS
#forward-addr: 2606:4700:4700::1111@853#cloudflare-dns.com
forward-addr: 1.1.1.1@853#cloudflare-dns.com
#forward-addr: 2606:4700:4700::1001@853#cloudflare-dns.com
forward-addr: 1.0.0.1@853#cloudflare-dns.com
# OpenDNS
forward-addr: 208.67.222.222
forward-addr: 208.67.220.220
|
