Unbound unbound_manager (Manager/Installer utility for unbound - Recursive DNS Server)

[Martineau]

I've uploaded v2.08

Abject apologies to those who are obsessed with viewing statistics and have had to endure excruciating withdrawal symptoms!

Fix: 's+' and 'scribe' commands are no longer executed - broken in v2.07 i.e. new menu order 's*' took precedence
Fix: When uninstalling unbound using 'z' it would complain and leave package 'unbound-checkconf' behind:

Existing unbound package found. Removing unbound
Removing package unbound-control-setup from root...
Removing package unbound-control from root...
Removing package unbound-anchor from root...
Removing package unbound-checkconf from root...
Collected errors:
 * print_dependents_warning: Package unbound-daemon is depended upon by packages:
 * print_dependents_warning:  unbound-checkconf
 * print_dependents_warning: These might cease to work if package unbound-daemon is removed.
 * print_dependents_warning: Force removal of this package with --force-depends.
 * print_dependents_warning: Force removal of this package and its dependents
 * print_dependents_warning: with --force-removal-of-dependent-packages.
 
 ***Error occurred when removing unbound

Change: Implemented pull-request by @dave14305 to enhance Stubby-Integration for legacy routers running @john9527's 374.43 LTS releases

 

[Martineau]

Martineau and everyone involved with this script, a big thank you and excellent job.
I just need to mention that on the latest update 2.07 i have lost the ability to enable extended statistics (s+) on both regular and dev build, is it just me or is anyone else having the same issue?

Please see post #261 and provide feedback if it still fails.

 

[yh2017]

Thanks for v2.08. sd might still be broken though?

 

[Martineau]

Thanks for v2.08. sd might still be broken though?

I'm useless......

Anyway, are the stats actually useful?

P.S. Did you try

e  = Exit Script

A:Option ==> dnsmasqstats

I'll hopefully push a Hotfix later to reinstate the short form 'sd' alias.

 

[yh2017]

P.S. Did you try

e  = Exit Script

A:Option ==> dnsmasqstats

I'll hopefully push a Hotfix later to reinstate the short form 'sd' alias.

That works!

 

[Mutzli]

I don't use Hulu, but I do have AiProtection enabled.

With 1, 089, 128 domains on the Diversion blocklist noted.

And Skynet and Unbound, of course.

No issues or slowdowns of note.

I don't get it, I'm having more and more issues as long as unbound runs. First it was just Hulu, now I'm seeing issues on several other sites not resolving any DNS requests. I'm sad and definitly miss the quick response of unbound, but I'll have to give up once again.

 

[L&LD]

@Mutzli, you must be running a heavily (or at least fatally) customized network configuration, which Unbound somehow breaks.

 

[Mutzli]

@Mutzli, you must be running a heavily (or at least fatally) customized network configuration, which Unbound somehow breaks.

Nothing special, no VPN just the usual scripts. Diversion with pixelserv, Skynet and FreshJR. I'm also running it on two routers in two different location and both installations have similar issues.

 

[dave14305]

I don't get it, I'm having more and more issues as long as unbound runs. First it was just Hulu, now I'm seeing issues on several other sites not resolving any DNS requests. I'm sad and definitly miss the quick response of unbound, but I'll have to give up once again.

Post your unbound.conf.

 

[skeal]

Nothing special, no VPN just the usual scripts. Diversion with pixelserv, Skynet and FreshJR. I'm also running it on two routers in two different location and both installations have similar issues.

What dns settings do you have set in the webui?

 

[L&LD]

@Mutzli different locations meaning physically different networks?

What order are you installing these in? On what file system?

 

[elnash]

Hello good, I'm a newbie on this topic I have managed to install unbound thanks to the good explanations of the forum. My question is how to know if it is working correctly. Thanks in advance.

Cheers!!!

 

[Martineau]

I don't get it, I'm having more and more issues as long as unbound runs. First it was just Hulu, now I'm seeing issues on several other sites not resolving any DNS requests. I'm sad and definitly miss the quick response of unbound, but I'll have to give up once again.

I sympathise, but without a knowledgeable SME to provide a tutorial regarding what information can be extracted/inferred from increasing the 'verbosity: X' directive or alternatively using 'dig', then identifying your unbound issues may take a while.

However, if you posted the 'dig' output for a domain that inexplicably fails, together with the section of the 'unbound.log' (having temporarily increased 'verbosity: X') then there may be clue in the output.

unbound is definitely a new technology for probably 99% of us, but I suspect that if the same spurious issues occurred with say dnsmasq+DoT+DNSSEC etc., would it be straight forward to instantly identify the reason?

 

[L&LD]

@elnash, use your network for a while. Don't just go to different websites, browse/click links within that main site too. Go to amtm and hit 7 Enter. Type s. What is the % cache hit?

 

[dave14305]

Hello good, I'm a newbie on this topic I have managed to install unbound thanks to the good explanations of the forum. My question is how to know if it is working correctly. Thanks in advance.

Cheers!!!

I think the easiest way is to go to https://www.dnsleaktest.com/

Note your WAN IP on the welcome page (Hello 123.45.67.89). Then run the test. The IP on the next page should list your WAN IP again as your DNS server.

 

[elnash]

@elnash, use your network for a while. Don't just go to different websites, browse/click links within that main site too. Go to amtm and hit 7 Enter. Type s. What is the % cache hit?

Ok, thank you very much for the information.

P.D.T: @dave14305 ,

ok, then I will try this way, since I like this world and the great firmware that we have along with these great scripts. But I am a real newbie, thanks again for the help provided, Great forum.

 

[skeal]

@elnash, use your network for a while. Don't just go to different websites, browse/click links within that main site too. Go to amtm and hit 7 Enter. Type s. What is the % cache hit?

@L&LD How do I direct message you bud?

 

[dave14305]

I don't get it, I'm having more and more issues as long as unbound runs. First it was just Hulu, now I'm seeing issues on several other sites not resolving any DNS requests. I'm sad and definitly miss the quick response of unbound, but I'll have to give up once again.

You should have Diversion logging enabled and see what happens when sites break. Do you see SERVFAIL messages in the diversion log? Or rebind attack messages because maybe you're using adblock in Unbound?

 

[Mutzli]

What dns settings do you have set in the webui?

 

[skeal]

View attachment 21336

I see problems. Disable DoT to start and why are you forwarding local dns to upstream dns server?