local_unbound and dnscrypt-proxy
jrm at ftfl.ca
Sun Nov 2 04:52:27 UTC 2014
I just upgraded to from 9-STABLE to 10-STABLE. On 9-STABLE I used
dnscrypt-proxy along with unbound from ports. I'm trying to reproduce
the old setup with the local_unbound included in FreeBSD 10. My current
configuration is below. If I comment out «include: /var/unbound/forward.conf» from
unbound.conf, resolving works, so it seems local_unbound is working OK.
If I change /etc/resolv.conf to use «nameserver 127.0.0.2»
(dnscrypt-proxy) instead of 127.0.0.1 (unbound) resolving works. So it
seems the forwarding is not working. Am I missing something?
Also, I have to comment out «unbound_conf="/var/unbound/forward.conf"»
from /etc/resolvconf.conf, otherwise forward.conf gets blanked.
% cat /var/unbound/unbound.conf
% cat /var/unbound/forward.conf
forward-addr: 127.0.0.2 at 53
% cat /etc/resolvconf.conf
resolv_conf="/dev/null" # prevent updating /etc/resolv.conf
unbound_restart="service local_unbound reload"
More information about the freebsd-questions