Project

General

Profile

Actions

Feature #4368

closed

[Unbound] Allow customized root.hints

Added by Armin Tueting about 9 years ago. Updated almost 8 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Category:
Unbound
Target version:
-
Start date:
02/03/2015
Due date:
% Done:

0%

Estimated time:
Plus Target Version:

Description

--- /etc/inc/unbound.inc        2015-02-03 09:37:11.000000000 +0100
+++ /cf/backup/2.2/unbound.inc  2015-01-22 21:38:47.000000000 +0100
@@ -227,11 +227,6 @@
        $msg_cache_size = (!empty($config['unbound']['msgcachesize'])) ? $config['unbound']['msgcachesize'] : "4";
        $verbosity = isset($config['unbound']['log_verbosity']) ? $config['unbound']['log_verbosity'] : 1;

-       // Set up proper root.hints
-       if (!file_exists("{$g['unbound_chroot_path']}/root.hints")) {
-               touch("{$g['unbound_chroot_path']}/root.hints");
-       }
-
        // Set up forwarding if it configured
        if (isset($config['unbound']['forwarding'])) {
                $dnsservers = array();
@@ -312,8 +307,6 @@
 {$anchor_file}
 prefetch: {$prefetch}
 prefetch-key: {$prefetch_key}
-# Root hints
-root-hints: "{$g['unbound_chroot_path']}/root.hints" 
 # Statistics
 {$statistics}
 # Interface IP(s) to bind to
Actions #1

Updated by Mathew Branyon about 9 years ago

According to the unbound documentation at https://www.unbound.net/documentation/unbound.conf.html

root-hints: <filename>
              Read the root hints from this file. Default  is  nothing,  using
              builtin  hints for the IN class. The file has the format of zone
              files, with  root  nameserver  names  and  addresses  only.  The
              default  may  become outdated, when servers change, therefore it
              is good practice to use a root-hints file.

I think if this is the case, then it would also be a good idea to add a function to upload this file, or have pfsense download and manage it, especially in the case of redundant systems/CARP.

Actions #2

Updated by Chris Buechler almost 8 years ago

  • Status changed from New to Closed

not desirable, it's correct as-is.

Actions

Also available in: Atom PDF