pfSense

	<unbound>

		<active_interface>all</active_interface>

		<outgoing_interface/>

		<custom_options>server:

private-domain: &quot;kcilink.com&quot;private-domain: &quot;m1e.net&quot;private-domain: &quot;mailermailer.com&quot;private-domain: &quot;khera.org&quot;</custom_options>

		<msgcachesize>4</msgcachesize>

		<outgoing_num_tcp>10</outgoing_num_tcp>

		<incoming_num_tcp>10</incoming_num_tcp>

		<edns_buffer_size>4096</edns_buffer_size>

		<num_queries_per_thread>512</num_queries_per_thread>

		<jostle_timeout>200</jostle_timeout>

		<cache_max_ttl>86400</cache_max_ttl>

		<cache_min_ttl>0</cache_min_ttl>

		<infra_host_ttl>900</infra_host_ttl>

		<infra_lame_ttl>900</infra_lame_ttl>

		<infra_cache_numhosts>10000</infra_cache_numhosts>

		<unwanted_reply_threshold>10000000</unwanted_reply_threshold>

		<log_verbosity>1</log_verbosity>

		<domainoverrides>

			<domain>7.168.192.in-addr.arpa</domain>

			<ip>199.83.96.5</ip>

			<descr><![CDATA[KCI office LAN]]></descr>

		</domainoverrides>

		<domainoverrides>

			<domain>97.168.192.in-addr.arpa</domain>

			<ip>199.83.96.5</ip>

			<descr><![CDATA[ashburn private lan]]></descr>

		</domainoverrides>

		<enable/>

		<dnssecstripped/>

		<dnssec/>

		<hardenglue/>

	</unbound>