Return to unbound.conf CVS log

Up to [local] / src / etc

Annotation of src/etc/unbound.conf, Revision 1.1

1.1     ! sthen       1: # $OpenBSD$
        !             2:
        !             3: server:
        !             4:        interface: 127.0.0.1
        !             5:        #interface: 127.0.0.1@5353      # listen on alternative port
        !             6:        interface: ::1
        !             7:        #do-ip6: no
        !             8:
        !             9:        access-control: 0.0.0.0/0 refuse
        !            10:        access-control: 127.0.0.0/8 allow
        !            11:        access-control: ::0/0 refuse
        !            12:        access-control: ::1 allow
        !            13:
        !            14:        hide-identity: yes
        !            15:        hide-version: yes
        !            16:
        !            17:        # Enable DNSSEC validation. Fetch a root key with unbound-anchor(8).
        !            18:        #
        !            19:        #module-config: "validator iterator"
        !            20:        #auto-trust-anchor-file: "/var/unbound/etc/root.key"
        !            21:
        !            22:        # Serve zones authoritatively from Unbound to resolver clients.
        !            23:        # Not for external service. Note use of "nodefault" for AS112 zones,
        !            24:        # i.e. reverse lookup zones for RFC1918 and similar addresses.
        !            25:        #
        !            26:        #local-zone: "local." static
        !            27:        #local-data: "mycomputer.local. IN A 192.0.2.51"
        !            28:        #local-zone: "2.0.192.in-addr.arpa." static nodefault
        !            29:        #local-data-ptr: "192.0.2.51 mycomputer.local"
        !            30:
        !            31:        # UDP EDNS reassembly buffer advertised to peers. Default 4096.
        !            32:        # May need lowering on broken networks with fragmentation/MTU issues,
        !            33:        # particularly if validating DNSSEC.
        !            34:        #
        !            35:        #edns-buffer-size: 1480
        !            36:
        !            37:        # Use TCP for "forward-zone" requests. Useful if you are making
        !            38:        # DNS requests over an SSH port forwarding.
        !            39:        #
        !            40:        #tcp-upstream: yes
        !            41:
        !            42: # Use an upstream forwarder (recursive resolver) for specific zones.
        !            43: # Example addresses given below are public resolvers valid as of 2014/03.
        !            44: #
        !            45: #forward-zone:
        !            46: #      name: "."                               # use for ALL queries
        !            47: #      forward-addr: 74.82.42.42               # he.net
        !            48: #      forward-addr: 2001:470:20::2            # he.net v6
        !            49: #      forward-addr: 8.8.8.8                   # google.com
        !            50: #      forward-addr: 2001:4860:4860::8888      # google.com v6
        !            51: #      forward-addr: 208.67.222.222            # opendns.com
        !            52: #      forward-first: yes                      # try direct if forwarder fails