On 11/06/2015 02:33 AM, Stuart Henderson wrote:
On 2015-11-05, Stuart Henderson <s...@spacehopper.org> wrote:
On 2015-11-04, Toyam Cox <aviator45...@gmail.com> wrote:
The default setting for "do-not-query-localhost" is "yes".
You may want to add "do-not-query-localhost: no" to your config in the
"server" section.
Right.
On Wed, Nov 4, 2015 at 11:25 AM, Gregory Edigarov <ediga...@qarea.com> wrote:
Hello,
Trying to make unbound and nsd co-exist on one server, the goal is to have
unbound listen for all requests redirecting requests for local zones to nsd:
nsd.conf
Just to make sure, this is just a local-only zone? (this approach won't work
correctly for zones that receive queries from other resolvers).
Expanding on this:
For people who do need this, set unbound to listen on an internal IP
address (or an alias), and nsd to listen on the external address.
Incoming queries from many resolvers will have the RD ("recursion desired")
bit cleared so Unbound (or another resolver) won't answer them. See for
yourself with 'dig +norecurse' (this is what Microsoft got wrong when
they tried to filter no-ip domains and broke them).
thanks for your explanations.