How do I set do-ip6: no in Unbound?

Started by optical, July 09, 2025, 08:44:04 PM

Previous topic - Next topic
Hello there, very frustrated with OPNsense and Unbound at the moment

What *should* be a simple task of editing /var/unbound/unbound.conf and changing the do-ip6: yes line to no, is proving impossible as it keeps being overwritten

First of all, all prior references to setting custom changes in Unbound are described in the past as Services > Unbound > General or Advanced containing some mythical text box area for Custom Options, which would make a whole lot of sense -- but what makes no sense, is that this has been removed for some reason in latest OPNsense, as I cannot find it anywhere

Then, I found topics saying to use /usr/local/etc/unbound.opnsense.d/ which contains other .conf files

So, I created no_ipv6.conf and it contains simply

server:
     do-ip6: no

and then restarted the Unbound via the GUI

Lo and behold, /var/unbound/unbound.conf is STILL showing do-ip6: yes


Any help would be greatly appreciated, as I am wondering if the reason Query Forwarding stops working is related to this.  Someone else said they had the exact same problem and solved it here: https://github.com/opnsense/core/issues/7639#issuecomment-2325683371

Essentially, Unbound and OPNsense have a problem where Query Forwarding simply stops working and it breaks web browsing connectivity with no rhyme or reason at times, also fails to resolve items when dig can do it just fine

do-ip6 is tied to the global IPv6 off switch Interfaces: Settings: Allow IPv6


Cheers,
Franco