webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-05-02 08:12:54 +02:00
Code Issues Packages Projects Releases Wiki Activity

New package: unbound 1.5.9

Browse Source 
Unbound is a validating, recursive, and caching DNS resolver.

https://www.unbound.net

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This commit is contained in:
Marcel Lorenz
2016-08-02 20:48:17 +02:00
committed by Michael Tremer
parent 1cd62a8d3d
commit d0e5f71f77
8 changed files with 563 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
config/unbound/forward.conf Normal file
View File

@@ -0,0 +1,6 @@
forward-zone:
name: "."
forward-addr: 85.214.20.141
forward-addr: 194.150.168.168
forward-addr: 208.67.222.222
forward-addr: 208.67.220.220

90
config/unbound/root.hints Normal file
View File

@@ -0,0 +1,90 @@
; This file holds the information on root name servers needed to
; initialize cache of Internet domain name servers
; (e.g. reference this file in the "cache . <file>"
; configuration file of BIND domain name servers).
;
; This file is made available by InterNIC
; under anonymous FTP as
; file /domain/named.cache
; on server FTP.INTERNIC.NET
; -OR- RS.INTERNIC.NET
;
; last update: March 23, 2016
; related version of root zone: 2016032301
;
; formerly NS.INTERNIC.NET
;
. 3600000 NS A.ROOT-SERVERS.NET.
A.ROOT-SERVERS.NET. 3600000 A 198.41.0.4
A.ROOT-SERVERS.NET. 3600000 AAAA 2001:503:ba3e::2:30
;
; FORMERLY NS1.ISI.EDU
;
. 3600000 NS B.ROOT-SERVERS.NET.
B.ROOT-SERVERS.NET. 3600000 A 192.228.79.201
B.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:84::b
;
; FORMERLY C.PSI.NET
;
. 3600000 NS C.ROOT-SERVERS.NET.
C.ROOT-SERVERS.NET. 3600000 A 192.33.4.12
C.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:2::c
;
; FORMERLY TERP.UMD.EDU
;
. 3600000 NS D.ROOT-SERVERS.NET.
D.ROOT-SERVERS.NET. 3600000 A 199.7.91.13
D.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:2d::d
;
; FORMERLY NS.NASA.GOV
;
. 3600000 NS E.ROOT-SERVERS.NET.
E.ROOT-SERVERS.NET. 3600000 A 192.203.230.10
;
; FORMERLY NS.ISC.ORG
;
. 3600000 NS F.ROOT-SERVERS.NET.
F.ROOT-SERVERS.NET. 3600000 A 192.5.5.241
F.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:2f::f
;
; FORMERLY NS.NIC.DDN.MIL
;
. 3600000 NS G.ROOT-SERVERS.NET.
G.ROOT-SERVERS.NET. 3600000 A 192.112.36.4
;
; FORMERLY AOS.ARL.ARMY.MIL
;
. 3600000 NS H.ROOT-SERVERS.NET.
H.ROOT-SERVERS.NET. 3600000 A 198.97.190.53
H.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:1::53
;
; FORMERLY NIC.NORDU.NET
;
. 3600000 NS I.ROOT-SERVERS.NET.
I.ROOT-SERVERS.NET. 3600000 A 192.36.148.17
I.ROOT-SERVERS.NET. 3600000 AAAA 2001:7fe::53
;
; OPERATED BY VERISIGN, INC.
;
. 3600000 NS J.ROOT-SERVERS.NET.
J.ROOT-SERVERS.NET. 3600000 A 192.58.128.30
J.ROOT-SERVERS.NET. 3600000 AAAA 2001:503:c27::2:30
;
; OPERATED BY RIPE NCC
;
. 3600000 NS K.ROOT-SERVERS.NET.
K.ROOT-SERVERS.NET. 3600000 A 193.0.14.129
K.ROOT-SERVERS.NET. 3600000 AAAA 2001:7fd::1
;
; OPERATED BY ICANN
;
. 3600000 NS L.ROOT-SERVERS.NET.
L.ROOT-SERVERS.NET. 3600000 A 199.7.83.42
L.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:9f::42
;
; OPERATED BY WIDE
;
. 3600000 NS M.ROOT-SERVERS.NET.
M.ROOT-SERVERS.NET. 3600000 A 202.12.27.33
M.ROOT-SERVERS.NET. 3600000 AAAA 2001:dc3::35
; End of file

9
config/unbound/root.key Normal file
View File

@@ -0,0 +1,9 @@
; autotrust trust anchor file
;;id: . 1
;;last_queried: 1467576595 ;;Sun Jul 3 22:09:55 2016
;;last_success: 1467576595 ;;Sun Jul 3 22:09:55 2016
;;next_probe_time: 1467616562 ;;Mon Jul 4 09:16:02 2016
;;query_failed: 0
;;query_interval: 43200
;;retry_time: 8640
. 172800 IN DNSKEY 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ;{id = 19036 (ksk), size = 2048b} ;;state=2 [ VALID ] ;;count=0 ;;lastchange=1467575383 ;;Sun Jul 3 21:49:43 2016

123
config/unbound/unbound.conf Normal file
View File

@@ -0,0 +1,123 @@
#
# Unbound configuration file for IPFire
#
# The full documentation is available at:
# https://www.unbound.net/documentation/unbound.conf.html
#
server:
# common server options
chroot: "/etc/unbound"
username: "unbound"
pidfile: "/var/run/unbound.pid"
num-threads: 2
port: 53
do-ip4: yes
do-ip6: no
do-udp: yes
do-tcp: yes
prefetch: yes
so-reuseport: yes
cache-min-ttl: 3600
cache-max-ttl: 86400
unwanted-reply-threshold: 10000
do-not-query-localhost: yes
# logging options
logfile: "log/unbound.log"
use-syslog: no
verbosity: 1
log-queries: no
log-time-ascii: yes
# Unbound Statistics
statistics-interval: 3600
statistics-cumulative: yes
extended-statistics: yes
# privacy options
hide-identity: yes
hide-version: yes
qname-minimisation: yes
minimal-responses: yes
# hardening options (some experimental)
harden-glue: yes
harden-large-queries: yes
harden-dnssec-stripped: yes
harden-short-bufsize: no
harden-below-nxdomain: no
harden-referral-path: no
harden-algo-downgrade: no
use-caps-for-id: yes
# listen on localhost interface
interface: 127.0.0.1
# file with ipfire interfaces
include: "/etc/unbound/interfaces.conf"
# control which clients are allowed to make (recursive) queries
access-control: 0.0.0.0/0 refuse
access-control: 127.0.0.0/8 allow
access-control: ::0/0 refuse
access-control: ::1 allow
access-control: ::ffff:127.0.0.1 allow
# file with ipfire networks
include: "/etc/unbound/access.conf"
# dnssec main options
val-clean-additional: yes
val-log-level: 1
# file with ipfire dnssec configuration
include: "/etc/unbound/dnssec.conf"
# DNS Rebinding
# For DNS Rebinding prevention
#
# All these addresses are either private or should not be routable in the global IPv4 or IPv6 internet.
# IPv4 Addresses
private-address: 0.0.0.0/8 # Broadcast address
private-address: 10.0.0.0/8
private-address: 127.0.0.0/8 # Loopback Localhost
private-address: 172.16.0.0/12
private-address: 192.168.0.0/16
private-address: 169.254.0.0/16
private-address: 198.18.0.0/15 # Used for testing inter-network communications
private-address: 198.51.100.0/24 # Documentation network TEST-NET-2
private-address: 203.0.113.0/24 # Documentation network TEST-NET-3
private-address: 233.252.0.0/24 # Documentation network MCAST-TEST-NET
# IPv6 Addresses
private-address: ::1/128 # Loopback Localhost
private-address: 2001:db8::/32 # Documentation network IPv6
private-address: fc00::/8 # Unique local address (ULA) part of "fc00::/7", not defined yet
private-address: fd00::/8 # Unique local address (ULA) part of "fc00::/7", "/48" prefix group
private-address: fe80::/10 # Link-local address (LLA)
# file with root servers
root-hints: "/etc/unbound/root.hints"
# custom DNS zone files
include: "/etc/unbound/zones/*.conf"
# DHCP leases (if configured)
include: /etc/unbound/dhcpleases.conf
# Blocklists
include: "/etc/unbound/blocklists/*.conf"
# end server config
# enable remote control only on localhost
remote-control:
control-enable: yes
control-use-cert: yes
control-interface: 127.0.0.1
server-key-file: "/etc/unbound/unbound_server.key"
server-cert-file: "/etc/unbound/unbound_server.pem"
control-key-file: "/etc/unbound/unbound_control.key"
control-cert-file: "/etc/unbound/unbound_control.pem"
# end remote control config
# custom DNS forward config
include: "/etc/unbound/forward.conf"