OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • English Forums »
  • Development and Code Review (Moderator: fabian) »
  • DNSBL and additional features Plugin for Unbound
« previous next »
  • Print
Pages: 1 ... 3 4 [5]

Author Topic: DNSBL and additional features Plugin for Unbound  (Read 12423 times)

lar.hed

  • Full Member
  • ***
  • Posts: 165
  • Karma: 5
    • View Profile
Re: DNSBL and additional features Plugin for Unbound
« Reply #60 on: July 05, 2020, 04:10:52 pm »
If I may ask for two small requests:

1) A local blacklist, where one can enter a few local (for me swedish) URLs to block

2) Firefox DoH checkbox since "Custom options" is about to be removed. Currently I have, which I think is correct inside the "Custom options" box the following: local-zone: "use-application-dns.net" static - it would be nice to get a checkbox the same thing so to speak, call something like "Prevent client auto DoH"?

ERROR: My try on request no 2 above, using custom options is NOT correct - I wonder what I did wrong....?
« Last Edit: July 05, 2020, 04:25:20 pm by lar.hed »
Logged

lar.hed

  • Full Member
  • ***
  • Posts: 165
  • Karma: 5
    • View Profile
Re: DNSBL and additional features Plugin for Unbound
« Reply #61 on: July 09, 2020, 08:47:11 am »
Yea right I now know what I did wrong - so I am new to unbound, so this goes under learning I guess.

Under the Unbound DNS - > General -> Custom options, one need to add this:

Code: [Select]
server:
local-zone: "use-application-dns.net." always_nxdomain

I simply forgot to add the "server:" part of the above.
Logged

cioby23

  • Newbie
  • *
  • Posts: 5
  • Karma: 0
    • View Profile
Re: DNSBL and additional features Plugin for Unbound
« Reply #62 on: July 31, 2020, 11:26:54 pm »
I just installed latest release of OPNsense 20.7 and it seems Unbound DNS blacklist do not work at all. No matter what lists I select from the dropdown list ads are still being displayed.
Logged

lar.hed

  • Full Member
  • ***
  • Posts: 165
  • Karma: 5
    • View Profile
Re: DNSBL and additional features Plugin for Unbound
« Reply #63 on: August 11, 2020, 11:39:33 am »
Anyone running DoT with Multi-WAN (failover)? Would be happy if someone could attach a log and settings for getting this to work - I might have screwed up somewhere, and I can not for the world get my failover to work again....
Logged

nikkon

  • Jr. Member
  • **
  • Posts: 71
  • Karma: 3
    • View Profile
Re: DNSBL and additional features Plugin for Unbound
« Reply #64 on: September 02, 2020, 02:43:04 pm »
Quote from: lar.hed on August 11, 2020, 11:39:33 am
Anyone running DoT with Multi-WAN (failover)? Would be happy if someone could attach a log and settings for getting this to work - I might have screwed up somewhere, and I can not for the world get my failover to work again....
same for me.
Logged

mimugmail

  • Hero Member
  • *****
  • Posts: 5032
  • Karma: 345
    • View Profile
Re: DNSBL and additional features Plugin for Unbound
« Reply #65 on: September 02, 2020, 03:58:06 pm »
What exactly is the problem there?
Logged
IRC: mimugmail
Twitter: mimu_muc
WWW: www.routerperformance.net

lar.hed

  • Full Member
  • ***
  • Posts: 165
  • Karma: 5
    • View Profile
Re: DNSBL and additional features Plugin for Unbound
« Reply #66 on: September 05, 2020, 12:24:24 pm »
Well that is just that, I know my current config does not work when it comes to failover (although it did once upon a time, and I have verified that with a separate config (which I have backed up of course) that seem to work - however that config makes my printer to not work... so I restored the config where the printer works and failover does not...) - everything else works.

So my idea was to check the config backup that works, and compare it to my non working failover - nothing turned up to help me. So now I am just trying to figure out if anyone else has WAN failover and DoT over Unbound?
Logged

mimugmail

  • Hero Member
  • *****
  • Posts: 5032
  • Karma: 345
    • View Profile
Re: DNSBL and additional features Plugin for Unbound
« Reply #67 on: September 05, 2020, 03:58:46 pm »
 But this should be reproducable with en- and disabling DoT, isnt it?
Logged
IRC: mimugmail
Twitter: mimu_muc
WWW: www.routerperformance.net

lar.hed

  • Full Member
  • ***
  • Posts: 165
  • Karma: 5
    • View Profile
Re: DNSBL and additional features Plugin for Unbound
« Reply #68 on: September 05, 2020, 04:33:45 pm »
Well if I remove my 4 DoT servers (1.1.1.1@853 , 1.0.0.1@853 , 9.9.9.9@853 and 114.112.112.112@853) if will not fix my WAN failover issue, and more importent, when I added them all back I lost some of the URL (DNS) lookups (read: some web sites was not resolved). Something a reboot solved.

I have been thinking alot about this issue I seem to have, and I am convinced it is some sort of rule problem.

For example I have a rule that only allows 853 to pass out of the WAN interfaces (FTTH and LTE), even with that active, after removing the four DoT servers from Unbound, I still get 100% name resolution working - I kind of did not expect that to happen....

So something got to be screwed up on my firewalls rules...
Logged

nzkiwi68

  • Newbie
  • *
  • Posts: 34
  • Karma: 3
    • View Profile
Re: DNSBL and additional features Plugin for Unbound
« Reply #69 on: October 27, 2020, 05:31:43 am »
Can we please have Response Policy Zones (RPZ) in Unbound?

I see it's supported in Unbound;
https://medium.com/nlnetlabs/response-policy-zones-in-unbound-5d453de75f26


The ideal would support for RPZ and the ability to specify the RPZ data and how often to fetch it;

I would immediately start using;
https://urlhaus.abuse.ch/api/#retrieve

and the download for their RPZ is;
https://urlhaus.abuse.ch/downloads/rpz/

RPZ is a very powerful tool for DNS blocking that I would love to use with Unbound.


Logged

mimugmail

  • Hero Member
  • *****
  • Posts: 5032
  • Karma: 345
    • View Profile
Re: DNSBL and additional features Plugin for Unbound
« Reply #70 on: October 27, 2020, 06:01:26 am »
Maybe worth Open a feature request in GitHub?
Logged
IRC: mimugmail
Twitter: mimu_muc
WWW: www.routerperformance.net

  • Print
Pages: 1 ... 3 4 [5]
« previous next »
  • OPNsense Forum »
  • English Forums »
  • Development and Code Review (Moderator: fabian) »
  • DNSBL and additional features Plugin for Unbound
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2021 All rights reserved
  • SMF 2.0.17 | SMF © 2019, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2