Unbound - Authoritative Recursive Caching DNS Server

[New2This]

I am pretty new to this stuff, but can follow instructions, Lol.

I have installed Unbound on my AX88U using the script. I am running Merlin 384.15.0 beta 1. The installation went well. However, when I use DNS Leak Test (https://www.dnsleaktest.com), it says that my DNS server is my ISP's. I am concerned as I set up Cloudflare in my router. Before I installed Unbound, the same test confirmed that I was using Cloudflare as my DNS servers.

Am I misunderstanding the concept here?

Just bought this router yesterday, running this script also, setup went well... Doing the dns leak test, mine is coming up with 4 servers, 2Cloudflare, then 2 others.. But none are my ISP

 

[Treadler]

Just bought this router yesterday, running this script also, setup went well... Doing the dns leak test, mine is coming up with 4 servers, 2Cloudflare, then 2 others.. But none are my ISP

Refer post #930 above, directs you to where I had the same issue initially.....

FYI, my config; no Stubby integration, use Unbound’s native ad blocker, & the memory/performance =“y” during installation.

 

[Treadler]

So if you upgrade, I would suggest these steps:

/opt/etc/init.d/S61unbound stop
service restart_dnsmasq
cp -p /opt/etc/init.d/S61unbound /opt/etc/init.d/xS61unbound.bak
opkg update
opkg upgrade
chown nobody /opt/var/lib/unbound
mv -f /opt/etc/init.d/xS61unbound.bak /opt/etc/init.d/S61unbound
/opt/etc/init.d/S61unbound start

There is also the return of the unbound-checkconf utility. install it with:

opkg install unbound-checkconf

So, for an amateur like me, I should stay away from that update until the Unbound guru/s get everything fixed maybe.....

Or maybe extend my very small scripts experience, & do as advised!

[Edit] & it’s done, didn’t hurt a bit!

 

[JemTheWire]

See if this post explains it:
Unbound - Authoritative Recursive Caching DNS Server

I am sorry. Not 100%

DNS Leaktest shows my IP address plus cpc101304-bagu16-2-0-cust458.1-3.cable.virginm.net. Before I installed Unbound, it would show Cloudflare

 

[Treadler]

I am sorry. Not 100%

DNS Leaktest shows my IP address plus cpc101304-bagu16-2-0-cust458.1-3.cable.virginm.net. Before I installed Unbound, it would show Cloudflare

Yup, you are now your very own recursive dns server!
(Which for me, was the point of the exercise).

 

[New2This]

Router Configuration recommended pre-reqs status:

[✔] Swapfile=3145720 kB
[✔] DNS Filter=ON
[✔] DNS Filter=ROUTER
[✔] WAN: Use local caching DNS server as system resolver=NO
[✔] Enable local NTP server=YES
[✔] Enable DNS Rebind protection=NO
[✔] Enable DNSSEC support=NO

Options:

[✔] unbound Logging
[✔] Stubby Integration
[✔] Ad and Tracker Blocking (No. of Adblock domains=51753,Blocked Hosts=1,Whitelist=22)
[✔] unbound CPU/Memory Performance tweaks

 

[Treadler]

Router Configuration recommended pre-reqs status:

[✔] Swapfile=3145720 kB
[✔] DNS Filter=ON
[✔] DNS Filter=ROUTER
[✔] WAN: Use local caching DNS server as system resolver=NO
[✔] Enable local NTP server=YES
[✔] Enable DNS Rebind protection=NO
[✔] Enable DNSSEC support=NO

Options:

[✔] unbound Logging
[✔] Stubby Integration
[✔] Ad and Tracker Blocking (No. of Adblock domains=51753,Blocked Hosts=1,Whitelist=22)
[✔] unbound CPU/Memory Performance tweaks

The Stubby integration is why you’re seeing Cloudflare servers.
If you want Unbound to take over full dns duties, no need to integrate Stubby.

 

[JemTheWire]

Yup, you are now your very own recursive dns server!
(Which for me, was the point of the exercise).

Thank you!

 

[jsbeddow]

@rgnldo, @Martineau
Well, I don't claim to fully understand the reasons behind it, but hopefully this 2nd flare-up (in the space of a week), doesn't threaten to unravel the progress that has been made on this project. Gentlemen...for the sake of SNBforum community, please take a deep breath and step back temporarily until you feel you can recommit to this amazing project.

 

[joe scian]

Is that the native unbound logging or syslog-ng/scribe logging?

I think i found problem -(at least it worked for me) when unbound logging was no longer working when upgraded to latest entware with scribe enabled.
I found that opt/etc/syslog-ng.d/unbound was set to other than octal 0600. Setting it to octal 0600 ( same as other files in this directory) fixed the logging issue.

 

[L&LD]

@joe scian I just checked and mine is already set to octal 0600 but the GUI still freezes when on the System Log page when I enable it in uiScribe '1'.

 

[joe scian]

@joe scian I just checked and mine is already set to octal 0600 but the GUI still freezes when on the System Log page when I enable it in uiScribe '1'.

Yes my problem was that logging wasnt happening at all after the upgrade - I am getting a little delay or freezing for a second or two when the unbound logging is there in scribe - but its not that bad at all on my ac 5300

 

[L&LD]

I re-installed scribe, rebooted the router and now everything seems to be up-to-date and working as expected.

 

[New2This]

The Stubby integration is why you’re seeing Cloudflare servers.
If you want Unbound to take over full dns duties, no need to integrate Stubby.

Thanks for the info, uninstalling

just saw this also: Stubby encrypts DNS queries sent from a client machine to a DNS Privacy resolver increasing end user privacy. So not sure if I should just leave it. or like you said let UNbound take over

 

[Treadler]

Thanks for the info, uninstalling

just saw this also: Stubby encrypts DNS queries sent from a client machine to a DNS Privacy resolver increasing end user privacy. So not sure if I should just leave it. or like you said let UNbound take over

A matter of preference really.
If you want DoT, (dns privacy), Unbound is probably superfluous/unnecessary for you?

If though, you want to have an ‘in house’ recursive resolver, unbound is good; disable dns privacy, reinstall Unbound without integrating stubby, let Unbound do its business.

Choices, choices......

 

[New2This]

'S02haveged' download FAILED with curl error 404

getting this error while trying to install it again?

 

[Treadler]

'S02haveged' download FAILED with curl error 404

getting this error while trying to install it again?

Hmmm, I could be wrong, but looks like the project might be dead?
I’m off it till the protagonists can find some area of agreement.....

 

[New2This]

Hmmm, I could be wrong, but looks like the project might be dead?
I’m off it till the protagonists can find some area of agreement.....

Ive just Format JFFS partition at next boot.. started fresh...and I get the same thing..just now
I get the same everytime

'S02haveged' download FAILED with curl error 404

Rerun unbound_manager nochk and select the Remove Existing unbound Installation option


Router Configuration recommended pre-reqs status:

[✔] Swapfile=2097148 kB
[✔] DNS Filter=ON
[✔] DNS Filter=ROUTER
[✔] WAN: Use local caching DNS server as system resolver=NO
[✔] Enable local NTP server=YES
[✔] Enable DNS Rebind protection=NO
[✔] Enable DNSSEC support=NO

Options: unbound Advanced install - User will be prompted to install options

 

[Smokey613]

Hmmm, I could be wrong, but looks like the project might be dead?
I’m off it till the protagonists can find some area of agreement.....

Looks like you may be correct. I just uninstalled Unbound and will just keep monitoring the situation. It’s really a shame, there is real potential here.

 

[dave14305]

Looks like you may be correct. I just uninstalled Unbound and will just keep monitoring the situation. It’s really a shame, there is real potential here.

As long as @Martineau is willing, we can persevere. Let’s all sleep on it and regroup in the morning.