Hi all,
Just by coincidence I noticed that my prod (baremetal) opnsense 25.7.1 install does not have the bind920 (BIND DNS suite with updated DNSSEC and DNS64) while my testing opnsense setup (VM) has the package installed and the test system is very basic vanilla install without any plugins.
Thoughts?
Actually I see that the os-bind plugin is installed in my test opnsense.
Maybe I installed the package myself at some point for testing.
Should I have os-bind plugin on my prod system?
If you use the Bind plugin then yes?
For most people Dnsmsq or Unbound in core are fine. Some use Dnscrypt-proxy or Bind from plugins though.
Choices. :)
Cheers,
Franco
Thanks. Will remove it from test. Not using it