pfSense

##########################

# Unbound Configuration

##########################

##

# Server configuration

##

server:

chroot: /var/unbound

username: "unbound"

directory: "/var/unbound"

pidfile: "/var/run/unbound.pid"

use-syslog: yes

port: 53

verbosity: 4

hide-identity: no

hide-version: yes

harden-referral-path: no

harden-glue: no

do-ip4: yes

do-ip6: yes

do-udp: yes

do-tcp: yes

do-daemonize: yes

module-config: "iterator"

unwanted-reply-threshold: 0

num-queries-per-thread: 1024

jostle-timeout: 500

infra-host-ttl: 900

infra-lame-ttl: 900

infra-cache-numhosts: 20000

outgoing-num-tcp: 40

incoming-num-tcp: 40

edns-buffer-size: 4096

cache-max-ttl: 240

cache-min-ttl: 0

harden-dnssec-stripped: no

msg-cache-size: 250m

num-threads: 2

msg-cache-slabs: 4

rrset-cache-slabs: 4

infra-cache-slabs: 4

key-cache-slabs: 4

rrset-cache-size: 8m

outgoing-range: 462

#so-rcvbuf: 4m

prefetch: yes

prefetch-key: yes

# Statistics

# Unbound Statistics

statistics-interval: 0

extended-statistics: yes

statistics-cumulative: yes

# Interface IP(s) to bind to

interface: 0.0.0.0

interface: ::0

# DNS Rebinding

# Access lists

include: /var/unbound/access_lists.conf

# Static host entries

include: /var/unbound/host_entries.conf

# dhcp lease entries

include: /var/unbound/dhcpleases_entries.conf

# Domain overrides

include: /var/unbound/domainoverrides.conf

# Forwarding

forward-zone:

	name: "."

	forward-addr: 208.67.222.222

	forward-addr: 208.67.220.220

###

# Remote Control Config

###

include: /var/unbound/remotecontrol.conf