-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Richard, Ondrej,
On 06/14/2011 09:44 AM, Ondřej Surý wrote: > On Mon, Jun 13, 2011 at 21:38, richard lucassen > <[email protected]> wrote: >> Hello list, >> >> [...] >> Into the config file. This is not so much work, but if there are many of >> these entries... > > Then you just use a shell script to generate the config? I don't think > that unbound needs a feature which can be accomplished by simple shell > or awk script: > > cd /etc/unbound/stub-zones; > for domain in *; do < $domain awk 'BEGIN { print "stub-zone:\n\tname: > \"'${domain}'\""; } { print "\tstub-host: \""$0"\""; } END { print ""; > }'; done > /etc/unbound/stub-zones.conf > > and add > > include: "/etc/unbound/stub-zones.conf" > > to your unbound.conf Yes, you can also do echo "stub-zone: name: $name stub-host: $svr" >> /etc/unbound/stub-zones.conf and then include that file in unbound.conf. So, it can be on one line without quotes (no spaces in names) and that is a very simple shellscript line. For the log file with queries have you thought about this: tcpdump -i xl0 dst port domain and "(" dst host [your-resolver-IP] or dst host [your-resolver-IP6] ")" (and with -f or -m to make it print numerically, otherwise it will perform (reverse) DNS lookups to log your DNS lookups ... ) tcpdump has options, but if you want more, then perhaps dnstop (tcpdump with some nicer statistics output): http://dns.measurement-factory.com/tools/dnstop/index.html (and there are a lot of other tools). Since you like to keep up, have you seen that unbound has a munin (and cacti) plugin for statistics gathering? Best regards, Wouter -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iQIcBAEBAgAGBQJN9xiCAAoJEJ9vHC1+BF+N/wcP/AmDFARSIQbVttJgpdz8bQbQ kwtXQaQxcQBXI5uJ79i9THF1edmKKbqaMWV3t3NuP/H0CDd6jRu768K0hpMb3/Ks f5TVSO0x0qXhxEUVyUpSgyFRE9qtiM1yx5ummn63tWtycl9nzNImahlhP0fXx/mq eec9KOPfuptBU2RYgYHVqwXDErOgERIF/ozlCGRBIp3n9q2WSoeE0PtnZWFFpjJi MLZ+AKxE59TLNQH5Irxvs9HL01Xq3om7U4HX25bTD2fnMGtfLx4beNuN+4AOkpGA IuvoU1VqcBDDecEGt9aUi2dZvpfudbxi8qqnhap9ldjzXGvwWcjhEtZ/mQb/r04m zKymPbSeVhpms2NUiq+mI36S+BQ1gknVSfusR83ElsBe4hUkTzGhKvrQ6zlZe+uJ KPbakymCmlVjgBmn75JHYoPNjY09cJXXELUkppb6deMAQZfPbUqapgftqODAeCg2 nwve2YrwoaYtLfangXWJgzNArmozShaW0u3+eB47lzfRXsDLVfkb29K8Dd3dekWj 5QfS0iKlQqoqqC4Hgv5etqn1sJIQUqtavj3xVoK6/jFznXS3+nG04nMpkcwDaOoW DwLy9OeifdlLjJrD8nAxEpSzAQRQm1ybB8F2dFPPiu2DLYWYDID4fi/7dJA4yhjP V1BDVU0PaBRFhgKIeqXC =cwaZ -----END PGP SIGNATURE----- _______________________________________________ Unbound-users mailing list [email protected] http://unbound.nlnetlabs.nl/mailman/listinfo/unbound-users
