FB-unboundの変更点

• 追加された行はこのように表示されます。
• 削除された行はこのように表示されます。

!FreeBSD_10用 unbound 設定
!FreeBSD_10用 local_unbound 設定
FreeBSD 10 から bind から nboundとLDNS に変更されているので

!start と stop
 % service local_unbound start

!DNSSEC非対応
/etc/unbound/conf.d/disable-dnssec.confを作成して

 server:
       module-config: "iterator"

を作っておく

!dig / nslookup
host と drill  に変更
 # drill www.iij.ad.jp
 ;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 20473
 ;; flags: qr rd ra ; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0 
 ;; QUESTION SECTION:
 ;; www.iij.ad.jp.	IN	A 
 
 ;; ANSWER SECTION:
 www.iij.ad.jp.	300	IN	A	202.232.2.164
 
 ;; AUTHORITY SECTION:
 iij.ad.jp.	72892	IN	NS	dns1.iij.ad.jp.
 iij.ad.jp.	72892	IN	NS	dns0.iij.ad.jp.
 
 ;; ADDITIONAL SECTION: 
 
 ;; Query time: 24 msec
 ;; SERVER: 192.168.12.181
 ;; WHEN: Sun Nov 29 17:36:41 2015
 ;; MSG SIZE  rcvd: 85

!! !FreeBSD_10用 unbound 設定
 /usr/ports/dns/unbound から make install
!unbound.conf
 server:
        interface: 0.0.0.0
        access-control: 192.168.0.0/16 allow
        do-ip6: no
or
 # This file is auto generated from "unbound.conf.s".
 server:
        verbosity: 1
        interface: 127.0.0.1
        interface: 192.168.12.182
        outgoing-num-tcp: 1
        incoming-num-tcp: 1
        msg-buffer-size: 8192
        msg-cache-size: 512k
        msg-cache-slabs: 2
        num-queries-per-thread: 64
        rrset-cache-size: 1m
        rrset-cache-slabs: 2
        infra-cache-slabs: 2
        infra-cache-numhosts: 512
        do-ip6: no
        access-control: 127.0.0.1/32 allow
        access-control: 192.168.12.0/24 allow
        access-control: 0.0.0.0/0 deny
        pidfile: /var/run/unbound.pid
        harden-short-bufsize: yes
        harden-large-queries: yes
        key-cache-size: 64k
        key-cache-slabs: 2
        neg-cache-size: 64k
        local-zone: "home.made." static
        local-data: "king.home.made.  IN A 192.168.12.2"
        local-data: "fisher.home.made. IN A 192.168.12.6"
        local-data: "sparrow.home.made.  IN A 192.168.12.100"
        local-data: "host1.home.made.  IN A 192.168.12.101"
        local-data: "host2.home.made.  IN A 192.168.12.102"
        local-data: "host3.home.made.  IN A 192.168.12.103"
        local-data-ptr: "192.168.12.2   thyme.home.made."
        local-data-ptr: "192.168.12.6   nasubi.home.made."
        local-data-ptr: "192.168.12.100 host0.home.made."
        local-data-ptr: "192.168.12.101 host1.home.made."
        local-data-ptr: "192.168.12.102 host2.home.made."
        local-data-ptr: "192.168.12.103 host3.home.made."
 python:
 remote-control:
 forward-zone:
        name: "jp"
        name: "com"
        forward-addr: 10.121.0.11
        forward-addr: 10.131.200.12
        forward-addr: 192.168.12.1