Unbound and CNAME

[Kuragari]

Hello, i use Unbound (DNS Resolver) on OPNSense and i want use google safe search on my LAN.

Google say to use a CNAME entry for www.google.com to forward to forcesafesearch.google.com. My problem is i don't have option to add CNAME in the Web GUI of DNS Resolver (only A and MX entry).

Anyway to do this.

My final goal is to have the most secure web access for my child. I think use Squid Remot ACL to disable some category (i have make some test but these Remote ACL don't block google image of porn images).

best regard

[bartjsmit]

Check out OpenDNS to implement another layer of control over internet access: https://www.opendns.com/home-internet-security/

Bart...

[franco]

We've added MX to unbound a while back, and I guess the same should be done for CNAME on our way to 17.1.

https://github.com/opnsense/core/issues/1041

FWIW, you can likely hook include files from the advanced settings in the DNS Resolver and manually inject your CNAME entries this way.