Unbound DNS Suggestion - Whitelist problem

[NonGough]

1)  Whitelist problem.  Using "cloreautomotive.com" as an example.  This domain appears in several DNSBL.  Using the Whitelist entries of "cloreautomotive.com" and "www.cloreautomotive.com" (and "*.cloreautomotive.com) does not enable any Whitelist action to override the DNSBL blocking domain entries.  Does Unbound DNS examine the Whitelist first or is the Whitelist ignored as the blocklist overrides are looked at after the DNSBL domains have been checked (which effectively ignores the Whitelist entries)?

2)  Suggestion:  Quad9 has a web page where you may check for blocked domains (use  https://quad9.com/result/?url=cloreautomotive.com  with  Services: Unbound DNS: General  "Enable Unbound" unchecked).  A similar query for Unbound DNS which lists the DNSBLs involved if Unbound DNS is blocking a domain would be very helpful for investigating unwanted blocks and creating a Whitelist entry.

 

[cookiemonster]

Good idea IMHO. You should put it on github

[NonGough]

A workaround for unwanted DNSBL blocks is to use a VPN (I use the free version of ProtonVPN).

Remember to disable the VPN ASAP after you access an Unbound DNS DNSBL blocked web site as the VPN completely bypasses the DNS protections afforded by OPNsense.