Re: Configuration issue

2017-11-27 Thread W.C.A. Wijngaards via Unbound-users
Hi, The order does not matter for local-zone, local-data, forward and stub clauses. Unbound picks the closest one. First the local-zone and local-data statements are processed. Then the cache of forward and stub data. Then the lookup vi forward and stub data. You could create a local-zone: ".

Re: stub-zone unexpected behaviour

2017-11-27 Thread Nick via Unbound-users
Hi Wouter, Thanks for your quick response. The tests were run using 1.6.4 & 1.6.7. I have just downloaded and built the trunk version (1.6.8), however the behaviour remains the same. For me, the second instance of Unbound is required because we would like to dynamically generate the IP of the

Re: Configuration issue

2017-11-27 Thread Sonic via Unbound-users
Maybe post the unbound.conf file (no comment lines please).

RE: Configuration issue

2017-11-27 Thread Aggelos Kanarelis via Unbound-users
No, but I specifically use unbound in my nslookup command. Wildcard forward zone all blocked No wildcard all answered Aggelos Kanarelis Systems Engineer Arts Alliance Media Ltd T: +44 (0)20 7751 7525 / M: +44 (0) 7809427708 aggelos.kanare...@artsalliancemedia.com

Re: Configuration issue

2017-11-27 Thread Sonic via Unbound-users
On Mon, Nov 27, 2017 at 8:42 AM, Aggelos Kanarelis wrote: > > nslookup facebook.com unboundIP > Server: UnKnown > Address: unbound IP > > Non-authoritative answer: > Name:facebook.com > Addresses: 2a03:2880:f101:83:face:b00c:0:25de > 31.13.76.68 Are you blocking access to all oth

RE: Configuration issue

2017-11-27 Thread Aggelos Kanarelis via Unbound-users
It is. Aggelos Kanarelis Systems Engineer Arts Alliance Media Ltd T:  +44 (0)20 7751 7525 / M: +44 (0) 7809427708 aggelos.kanare...@artsalliancemedia.com www.artsalliancemedia.com Landmark House Hammersmith Bridge Road London W6 9EJ Follow us on  Twitter / Facebook / LinkedIn -Original Me

Re: Configuration issue

2017-11-27 Thread Sonic via Unbound-users
On Mon, Nov 27, 2017 at 8:48 AM, Aggelos Kanarelis wrote: > Right, so when I create a wildcard zone and forward to nothing it stopped > resolving my addresses as well. > Order may be important - make sure the wildcard zone is last.

RE: Configuration issue

2017-11-27 Thread Aggelos Kanarelis via Unbound-users
Right, so when I create a wildcard zone and forward to nothing it stopped resolving my addresses as well. Any ideas? Aggelos Kanarelis Systems Engineer Arts Alliance Media Ltd T:  +44 (0)20 7751 7525 / M: +44 (0) 7809427708 aggelos.kanare...@artsalliancemedia.com www.artsalliancemedia.com Lan

RE: Configuration issue

2017-11-27 Thread Aggelos Kanarelis via Unbound-users
I don't think this is working nslookup facebook.com unboundIP Server: UnKnown Address: unbound IP Non-authoritative answer: Name:facebook.com Addresses: 2a03:2880:f101:83:face:b00c:0:25de 31.13.76.68 I run an unbound-control reload before to read the config file again and flush

RE: Configuration issue

2017-11-27 Thread Aggelos Kanarelis via Unbound-users
Thank you. That's probably what I want. There's no stub zones and no local data, so I guess it will only answer the forward zones queries. I'll let you know if it worked. Aggelos Kanarelis Systems Engineer Arts Alliance Media Ltd T:  +44 (0)20 7751 7525 / M: +44 (0) 7809427708 aggelos.kanare.

Re: Configuration issue

2017-11-27 Thread Sonic via Unbound-users
On Mon, Nov 27, 2017 at 8:10 AM, Aggelos Kanarelis wrote: > > Thanks for your reply, but that will only have the queries answered by a > different server. I don't want them answered at all. The endpoints that will > be configured with that DNS server must only be able to resolve the domains > t

RE: Configuration issue

2017-11-27 Thread Aggelos Kanarelis via Unbound-users
Hi Sonic Thanks for your reply, but that will only have the queries answered by a different server. I don't want them answered at all. The endpoints that will be configured with that DNS server must only be able to resolve the domains that I will specifically configure with a forward zone. Ever

Re: Configuration issue

2017-11-27 Thread Sonic via Unbound-users
Two ways, as a validator that queries the root servers and follows the chain, or use a wildcard forward for all of the other domains you don't want to specifically route to a particular cache. Ex. of forward: === forward-zone: name: "." forward-addr: 8.8.8.8

Re: stub-zone unexpected behaviour

2017-11-27 Thread W.C.A. Wijngaards via Unbound-users
Hi Nick, It looks similar to a bug that was fixed (somewhat recently). Try upgrading, perhaps it is simply already solved. It was the failure fallback cases that did not respect configured stub boundaries. If you want unbound to fetch the NS record for a stub from a particular address, there is

Configuration issue

2017-11-27 Thread Aggelos Kanarelis via Unbound-users
Hello I am trying to configure Unbound as a server that forwards all queries about specific domains to Route 53. That part I managed to configure using forward zones for each domain I want to serve. The problem is that the server has to drop every other query about every other domain and this i