pfSense

1. With 2.2.x you won't see this error. Unbound even won't start.
2. "access-control: 0.0.0.0/0 allow" is an right command and works until you config Domain Overrides.

The problem is, the order of the commands.

1. Take a plain pfsense
2. add custom options (in 2.2.x advanced options): harden-dnssec-stripped: yes
   • You can apply, it works and you didn't get an error
3. configure Domain Overrides
   • Now apply - unbound crashes, but you didn't see an error
   • Press save again and you get an error

The problem is the section. It changes for the custom options from server to stub-zone if you add Domain Overrides.

Who knows this?

1. Put the custom options in front of include domainoverrides.conf.
   • domainoverrides changes the section by its own, so nothing happens if there a section changes inside the custom options.
2. Why didn't I see the crash after adding the Domain Overrides? There is no error detection if no save button pressed.
3. Put a note under the custom options field, that the commands are always in server: section and the section can be changed by user with keywords.

I thought about this a second time:

To avoid any confusion with this setting put always a "server:" in front of custom settings.