Maintained by: NLnet Labs

[Unbound-users] 8.8.8.8

Papp Tamás
Sun Jun 27 10:35:45 CEST 2010


Leen Besselink wrote, On 2010. 06. 27. 8:54:
> I tested it on Ubuntu 10.04 with 1.4.5 and a copy of doc/example.conf 
> with just 2 few lines changed:
>
> use-syslog: no
>
> forward-zone:
>         name: "."
>         forward-addr: 8.8.8.8
>
> And it resolves pool.ntp.org, europe.pool.ntp.org and 
> 3.europe.pool.ntp.org on 127.0.0.1 just fine.

Thank you.

I obviously should try this example.conf by myself:(


So I've juest tested it bit, and this option is the problem:

 dlv-anchor-file: "/etc/unbound/dlv.isc.org.key"


The file was downloaded from the url suggested by the config file.

This is the whole config:

server:
    verbosity: 1
    num-threads: 2
    do-daemonize: yes
    access-control: 10.0.0.0/8 allow
    access-control: 127.0.0.0/8 allow
    chroot: ""
    directory: "/etc/unbound"
    use-syslog: yes
    root-hints: "/etc/unbound/named.cache"
    private-address: 10.0.0.0/8
    private-domain: "adverticum.local"
    unwanted-reply-threshold: 10000000
#   dlv-anchor-file: "/etc/unbound/dlv.isc.org.key"
    do-ip6: no

python:

remote-control:
    control-enable: yes
    control-interface: 127.0.0.1
    control-port: 953
    server-key-file: "/etc/unbound/unbound_server.key"
    server-cert-file: "/etc/unbound/unbound_server.pem"
    control-key-file: "/etc/unbound/unbound_control.key"
    control-cert-file: "/etc/unbound/unbound_control.pem"

stub-zone:
    name: "adverticum.local"
    stub-addr: 10.1.1.253
    stub-addr: 10.1.1.254
    stub-prime: no

stub-zone:
    name: "10.in-addr.arpa"
    stub-addr: 10.1.1.253
    stub-addr: 10.1.1.254
    stub-prime: no

forward-zone:
    name: "."
    forward-addr: 8.8.8.8
    forward-addr: 8.8.4.4

Is this a problem of the servers from google?


BTW, what does stub-prime exactly do? I'm afraid, it's not clear to me, 
what does "it performs NS set priming" mean?

Thank you,

tamas