diff options
Diffstat (limited to 'diffie/unbound.conf')
| -rw-r--r-- | diffie/unbound.conf | 32 |
1 files changed, 32 insertions, 0 deletions
diff --git a/diffie/unbound.conf b/diffie/unbound.conf new file mode 100644 index 0000000..3cf7fbc --- /dev/null +++ b/diffie/unbound.conf @@ -0,0 +1,32 @@ +# Unbound configuration file for Debian. +# +# See the unbound.conf(5) man page. +# +# See /usr/share/doc/unbound/examples/unbound.conf for a commented +# reference config file. +# +# The following line includes additional configuration files from the +# /etc/unbound/unbound.conf.d directory. +## me ### include: "/etc/unbound/unbound.conf.d/*.conf" + +server: + #auto-trust-anchor-file: "/var/lib/unbound/root.key" # seems like my dnscrypt server do no support DNSSEC, so I can't enable this + #interface: 0.0.0.0 + + # so I enabled global access to DNS... + interface: 0.0.0.0 + interface: ::0 + access-control: 0.0.0.0/0 allow + access-control: ::/0 allow + + #access-control: 0.0.0.0/8 allow (redundant now, see above) + include: /etc/unbound/local-blocking-data.conf + +do-not-query-localhost: no +forward-zone: + name: "." + forward-addr: 127.0.0.1@5353 + forward-addr: 127.0.0.1@5354 + forward-addr: 127.0.0.1@5355 + forward-addr: 127.0.0.1@5356 + |