What's the correct way to set up local zone reverse lookup with Unbound?

[djbmister]

So had a similiar issue, I wanted to use my wifiap router to resolve the wifi clients PTR records back to the opnsense.

opnsense > wifiap > wifi client ptr

Turns out unbound blocks by default any local-zone that it does not know about.

So in opnsense 20.7 and later, you need to setup the domain overrides:

as an example:

wifi being the domain forwarded to the wifiap router
and then the PTR address record so to pick up the wifi clients records.

Code: [Select]

wifi 192.168.10.3 wifi domain on AP
10.168.192.in-addr.arpa 192.168.10.3 WIFIAP LAN2G PTR 192.168.10
Then in the unbound 'General section', 'Custom options', add the 'local-zone' of the PTR records

Code: [Select]

local-zone: "10.168.192.in-addr.arpa" transparent
Then the PTR record will be queried to the forwarding dns server aka the wifiap router.

[Taomyn]

Then in the unbound 'General section', 'Custom options', add the 'local-zone' of the PTR records

Code: [Select]

local-zone: "10.168.192.in-addr.arpa" transparent
Then the PTR record will be queried to the forwarding dns server aka the wifiap router.

When I add this after adding the overrides, the service no longer starts, I'm on OPNsense v21.

[djbmister]

Then in the unbound 'General section', 'Custom options', add the 'local-zone' of the PTR records

Code: [Select]

local-zone: "10.168.192.in-addr.arpa" transparent
Then the PTR record will be queried to the forwarding dns server aka the wifiap router.

When I add this after adding the overrides, the service no longer starts, I'm on OPNsense v21.

Mine looks like this

Code: [Select]

server:
rrset-roundrobin: yes
local-zone: "10.168.192.in-addr.arpa" transparent
Works fine for me. You have no space between "transparent"

[Taomyn]

Works fine for me. You have no space between "transparent"

No it's there, just the font being used in the GUI makes it difficult to see. I re-entered the line and it was still the same and the service refused to start.


What do you have for the "Local Zone Type" above as I wonder if that is conflicting?