Question on Unbound DNS – Host Overrides

[AseKarlsson]

Hi All,

I am not sure if I am right to try to use “Host Overrides” to be able to exclude some internal IPs from hitting the “Unbound DNS -Blocklist”?

This is a domain network so all clients talks first to the internal Windows DNS server that forwards.
Can this be configured and how?

In pfSense I could add the following to the DNS resolver, Custom Options to achieve this:

server:
    access-control-view: 192.168.0.40/8 bypass
    access-control-view: 192.168.0.0/8 dnsbl
view:
    name: "bypass"
    view-first: yes
view:
    name: "dnsbl"
    view-first: yes
    include: /var/unbound/pfb_dnsbl.*conf

[zan]

I don't use unbound DNSBL but if you are accustomed to custom config you may use it as described in https://docs.opnsense.org/manual/unbound.html#advanced-configurations

You may also install os-unboundcustom-maxit plugin from mimugmail repo, you can then paste your custom config through GUI.

[AseKarlsson]

Thanks Zan,

Downloaded the repo and installed the os-unboundcustom-maxit plugin.
Anyone with ideas how I should format the same code I used in pfSense DNS resolver?

[AseKarlsson]

Can this even be done this way nowdays?