Re: [DNG] Unbound details: was Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-09-07 Thread Rick Moen
Quoting Steve Litt (sl...@troubleshooters.com): > The syntax isn't "stub zone", it's "local zone". They use the "stub > zone" syntax for something else. Thank you for turning me on to Unbound > --- it's twice as easy as Bind9 and djbdns. You're very welcome. I quote below (in part) the

Re: [DNG] Unbound details: was Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-09-07 Thread Steve Litt
On Thu, 6 Sep 2018 17:34:37 -0700 Rick Moen wrote: > Quoting Steve Litt (sl...@troubleshooters.com): > > > I've found the way for Unbound itself to do simple on-subnet auth > > without a separate auth server, and will reveal them tomorrow. > > That is doubtless the 'stub zone' functionality

Re: [DNG] Unbound details: was Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-09-06 Thread Rick Moen
Quoting Steve Litt (sl...@troubleshooters.com): > I've found the way for Unbound itself to do simple on-subnet auth > without a separate auth server, and will reveal them tomorrow. That is doubtless the 'stub zone' functionality I mentioned in

Re: [DNG] Unbound details: was Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-09-06 Thread Steve Litt
I've found the way for Unbound itself to do simple on-subnet auth without a separate auth server, and will reveal them tomorrow. Thanks. SteveT On Sun, 19 Aug 2018 21:22:40 -0400 Steve Litt wrote: > On Tue, 7 Aug 2018 13:27:25 -0700 > Rick Moen wrote: > > > > Most highly rated comment: > >

Re: [DNG] Unbound details: was Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-08-22 Thread Rick Moen
Quoting Renaud (Ron) OLGIATI (ren...@olgiati-in-paraguay.org): > Sadly, Debian and Devuan have nothing that compares with the Drak* tools. Standards of what are desirable tools for system administration, They Do Differ[tm]. On that foundation (diversity of opinions) we derive horse racing,

Re: [DNG] Unbound details: was Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-08-21 Thread Rick Moen
Quoting Renaud (Ron) OLGIATI (ren...@olgiati-in-paraguay.org): > If you are looking for a distro with easy-to-use GUI interface, and > without systemd, you might consider PCLinuxOS, and its suite of Drak* > configuration apps inherited from Mandrake / Mandriva / Mageia. Or one can use Devuan.

Re: [DNG] Unbound details: was Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-08-21 Thread Renaud (Ron) OLGIATI
On Tue, 21 Aug 2018 22:04:36 +0100 Simon Hobson wrote: > Ouch - like I said, the message is clear that they don't want to support and > promote it. Given that one of the main reasons for people to run OS X Server > is for the "easy to use GUI", I'd say that it pretty well removes most of the

Re: [DNG] Unbound details: was Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-08-21 Thread Rick Moen
Quoting wirelessd...@gmail.com (wirelessd...@gmail.com): > I'm not much of a BIND9 expert, so I'll happily try out something else > if it's considered to be more secure. I concur with Steve's comments about the desirability of separating recursive service from authoritative service -- and I

Re: [DNG] Unbound details: was Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-08-21 Thread Rick Moen
Quoting wirelessd...@gmail.com (wirelessd...@gmail.com): > I want to switch from macOS Server to unbound for a local LAN DNS as > its DNS features will be deprecated soon, but my reading tells me that > unbound only acts as a recursive nameserver, not authoritative. > > What’s the general

Re: [DNG] Unbound details: was Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-08-21 Thread Rick Moen
Quoting Steve Litt (sl...@troubleshooters.com): > So it's been about 2 weeks I've been using unbound, and subjectively, > my web browsing has slowed, compared to the straight 8.8.8.8 and > 8.8.4.4 I used before. Sometimes the browser's status bar says > "resolving" during those delays, and

Re: [DNG] Unbound details: was Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-08-21 Thread Simon Hobson
wirelessd...@gmail.com wrote: >> Most of the services are disappearing from the macOS Server app, >> making it almost useless for a home server environment. >> https://support.apple.com/en-au/HT208312 Ouch - like I said, the message is clear that they don't want to support and promote it. Given

Re: [DNG] Unbound details: was Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-08-20 Thread wirelessduck
Forgetting to hit reply-all :D On Tue, 21 Aug 2018 at 13:20, wrote: > > > I haven't been following OSX Server, so they are dropping DNS now ? It's > > always seemed like the unwanted stepchild, not really promoted or > > developed, and with no proper server hardware to run it on (I used to >

Re: [DNG] Unbound details: was Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-08-20 Thread wirelessduck
Forgetting to hit reply-all :D On Tue, 21 Aug 2018 at 13:24, wrote: > > On Tue, 21 Aug 2018 at 08:15, Steve Litt wrote: > > > There are disadvantages to having the same software do both auth and > > cache, and BIND is a big honkin complexity. See the djbdns > > documentation for details. I

Re: [DNG] Unbound details: was Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-08-20 Thread Steve Litt
On Mon, 20 Aug 2018 11:15:49 +0100 Simon Hobson wrote: > wirelessd...@gmail.com wrote: > > > What’s the general consensus on a good authoritative server to pair > > with unbound? > > > > I can see both knot and nsd are packaged in devuan, but have no > > experience with any outside BIND9 and

Re: [DNG] Unbound details: was Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-08-20 Thread Simon Hobson
wirelessd...@gmail.com wrote: > I want to switch from macOS Server to unbound for a local LAN DNS as its DNS > features will be deprecated soon, but my reading tells me that unbound only > acts as a recursive nameserver, not authoritative. > > What’s the general consensus on a good

Re: [DNG] Unbound details: was Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-08-19 Thread wirelessduck
> On Tue, 7 Aug 2018 13:27:25 -0700 > Rick Moen wrote: > > >> Most highly rated comment: >> >> I run my own local recursive nameservers even on my portable >> devices. Totally not interested in using anyone's resolvers but my >> own. >> >> Ding! >> >> 1. apt-get install unbound >> 2. sed

[DNG] Unbound details: was Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-08-19 Thread Steve Litt
On Tue, 7 Aug 2018 13:27:25 -0700 Rick Moen wrote: > Most highly rated comment: > > I run my own local recursive nameservers even on my portable > devices. Totally not interested in using anyone's resolvers but my > own. > > Ding! > > 1. apt-get install unbound > 2. sed -i