Unbound is a validating, recursive, and caching DNS resolver. unbound 1.4.20_5 /usr/local/pkg/unbound.inc Unbound DNS Setup Unbound specific settings

Services

/pkg_edit.php?xml=unbound.xml&id=0 unbound unbound.sh unbound Unbound is a validating, recursive, and caching DNS resolver. /usr/local/pkg/ 0644 https://packages.pfsense.org/packages/config/unbound/unbound.inc /usr/local/www/ 0644 https://packages.pfsense.org/packages/config/unbound/unbound_status.php /usr/local/www/ 0644 https://packages.pfsense.org/packages/config/unbound/unbound_acls.php /usr/local/pkg/ 0644 https://packages.pfsense.org/packages/config/unbound/unbound_advanced.xml /usr/local/bin/ 0755 https://packages.pfsense.org/packages/config/unbound/unbound_monitor.sh Unbound DNS Settings /pkg_edit.php?xml=unbound.xml&id=0 Unbound DNS Advanced Settings /pkg_edit.php?xml=unbound_advanced.xml&id=0 Unbound DNS ACLs /unbound_acls.php Unbound DNS Status /unbound_status.php Settings listtopic enable Enable Unbound Enable the use of Unbound as your DNS forwarder. checkbox Network interface active_interface The network interface(s) the Unbound DNS server will listen on. interfaces_selection wan Query interfaces query_interface Utilize different network interface(s) that Unbound DNS server will use to send queries to authoritative servers and receive their replies. <br/> <b>Note:</b> If a query interface is not selected then the default of all interfaces will be used. interfaces_selection wan dnssec_status Enable DNSSEC Enable the use of DNSSEC. <br/> <b>Note:</b> It is recommended that when enabling DNSSEC you disable the use of forwarding mode and allow Unbound to do the resolving. This is to ensure that DNS replies are valid and authentic. checkbox on forwarding_mode Enable forwarding mode Configure the server to make use of the DNS servers configured in <a href="system.php">System: General setup</a>. <br/> <b>Note:</b> Disabling this will cause Unbound to perform DNS queries without using the upstream configured DNS servers. checkbox on private_address Private Address support With this option enabled <a href="http://tools.ietf.org/html/rfc1918">RFC1918</a> addresses are stripped away from DNS answers. Additionally, the DNSSEC validator may mark the answers bogus. This protects against <a href="http://en.wikipedia.org/wiki/DNS_rebinding">DNS Rebinding</a>. <br/> <b>Note:</b> Domain Overrides and Host entries will be allowed to return answers if this option is enabled. checkbox on regdhcpstatic Register DHCP static mappings If this option is set, then DHCP static mappings will be registered in the DNS forwarder, so that their name can be resolved. You should also set the domain in <a href="system.php">System: General setup</a> to the proper value. checkbox txtsupport TXT Comment Support If this option is set, then any descriptions associated with Host entries and DHCP Static mappings will create a corresponding <a href="http://en.wikipedia.org/wiki/List_of_DNS_record_types">TXT record</a>. checkbox on dumpcache Cache Restoration Support This option allows the restoration of the current Unbound cache, so that in the event of a reboot or shutdown the cache is restored instantly. This helps speed up DNS resolving. checkbox Statistics listtopic stats Enable Statistics Unbound will log the number of queries that the resolver handles. checkbox stats_interval,cumulative_stats,extended_stats stats_interval Statistics Interval Select the time as to when statistics will be written to the Unbound log file. select 3600 5 minutes300 10 minutes600 20 minutes1200 30 minutes2400 1 hour3600 2 hours7200 cumulative_stats Enable Cumulative Statistics Once unbound is started, the statistics collected are cumulative and are not cleared after each report has been logged. select no Nono Yesyes extended_stats Enable Extended Statistics In addition to collecting the total number of queries also collect what type of queries are handled by the resolver. checkbox unbound_validate($_POST, "basic"); unbound_reconfigure(); unbound_install(); unbound_uninstall();