Unbound unbound dns firewall (noobish question)

[gmt]

Hello guys, got a question related to unbound (installed on AX86U) , specifically to the unbound GUI, what is the purpose of DNS firewall (what should be reflected there in case it contains something) and why it is completely empty in my case.

Thanks for your inputs

 

[Martineau]

Hello guys, got a question related to unbound (installed on AX86U) , specifically to the unbound GUI, why it is completely empty in my case

Have you enabled AdBlock?

what is the purpose of DNS firewall

Unbound - unbound_manager (Manager/Installer utility for unbound - Recursive DNS Server) - General questions / discussion thread 2

whats the differenz from default to 24 hours ?

www.snbforums.com

 

[gmt]

Hi, thank you Martineau, I have Diversion enabled which causes unbound to throw a conflict message, so I've decided to not enable AdBlock in unbound. OK, so now It is clear what DNS firewall does "by enabling the DNS firewall in unbound_manager , this creates a cron job every 15 mins to refresh the rules maintained by URLhaus". The fact that the GUI graph is empty means there are no hits on the malware rules detected if I understand correctly.

 

[Martineau]

Hi, thank you Martineau, I have Diversion enabled which causes unbound to throw a conflict message, so I've decided to not enable AdBlock in unbound. OK, so now It is clear what DNS firewall does "by enabling the DNS firewall in unbound_manager , this creates a cron job every 15 mins to refresh the rules maintained by URLhaus". The fact that the GUI graph is empty means there are no hits on the malware rules detected if I understand correctly.

As per the FAQ

Unbound - unbound_manager (Manager/Installer utility for unbound - Recursive DNS Server)

This thread is for the discussion topic : unbound_manager script. As per the GitHub Hints/Tips: Differences between the operational modes Easy mode Advanced Mode 'Easy' mode - you have limited Install options: i.e. Advanced Options Stubby Integration DoT installs are not available...

www.snbforums.com

You can enable both AdBlock+Unbound concurrently.

You should click/read the URLHaus description to understand how/why they provide the RPZ DNS Firewall rules, and what the DNS Firewall is designed to do.

However, personally I recall I have only ever observed one specific DNS Firewall hit on the GUI graphs, but it is refreshed every 15mins since URLHaus attempts to be proactive in responding quickly to emerging/identified current real-time threats, so I leave it ACTIVE - just in case.

 

[gmt]

Thank you!

 

[Martineau]

Thank you!

No problem.

P.S. As per the convention in the Addons forum, could you please edit the thread title with the unbound prefix filter.