|
|
@ -1,4 +1,4 @@ |
|
|
|
# $OpenBSD: unbound.conf,v 1.5 2015/07/19 17:29:42 sthen Exp $ |
|
|
|
# $OpenBSD: unbound.conf,v 1.6 2015/12/15 20:26:55 sthen Exp $ |
|
|
|
|
|
|
|
server: |
|
|
|
interface: 127.0.0.1 |
|
|
@ -14,6 +14,11 @@ server: |
|
|
|
hide-identity: yes |
|
|
|
hide-version: yes |
|
|
|
|
|
|
|
# Uncomment to enable qname minimisation. |
|
|
|
# https://tools.ietf.org/html/draft-ietf-dnsop-qname-minimisation-08 |
|
|
|
# |
|
|
|
# qname-minimisation: yes |
|
|
|
|
|
|
|
# Uncomment to enable DNSSEC validation. |
|
|
|
# |
|
|
|
#auto-trust-anchor-file: "/var/unbound/db/root.key" |
|
|
@ -37,6 +42,13 @@ server: |
|
|
|
# |
|
|
|
#tcp-upstream: yes |
|
|
|
|
|
|
|
# DNS64 options, synthesizes AAAA records for hosts that don't have |
|
|
|
# them. For use with NAT64 (PF "af-to"). |
|
|
|
# |
|
|
|
#module-config: "dns64 validator iterator" |
|
|
|
#dns64-prefix: 64:ff9b::/96 # well-known prefix (default) |
|
|
|
#dns64-synthall: no |
|
|
|
|
|
|
|
remote-control: |
|
|
|
control-enable: yes |
|
|
|
control-use-cert: no |
|
|
|