Unbound Settings

[raion969]

Hello

Is there a way to see that unbound does realy work?

And is this sentences still right, because on the pre recommended settings it says something different.

Also on the website https://www.dnsleaktest.com/

should it show the router ip as my dns?

 

[L&LD]

How and what you test depends on how you've set up Unbound and other router settings.

With further details of your hardware and configuration, including the firmware version and the Unbound version you're running, you may find that the answer to your last question should really be 'yes'.

 

[raion969]

so i have the rt-ac5300 with the latest merlin firmware and also the latest unbound firmware.

I use ntpMerlin with chrony but sometimes the ntp server dont start or even after restart i dont know why.

Are my Unboud Settings Correct i post some screenshots


Unbound Settings

Router Configuration recommended pre-reqs status:

[✔] Swapfile=2097148 kB
[✔] DNS Filter=ON
[✔] DNS Filter=ROUTER
[✔] WAN: Use local caching DNS server as system resolver=NO
[✔] Entware NTP server 'S77ntpd' is running
[✔] Enable DNS Rebind protection=NO
[✔] Enable DNSSEC support=NO

Options:

[✔] unbound CPU/Memory Performance tweaks
[✔] Firefox DNS-over-HTTPS (DoH) DISABLE/Blocker
[✔] Router Graphical GUI statistics TAB installed
[✔] unbound-control FAST response ENABLED



These Scripts are installed:

The Asuswrt-Merlin Terminal Menu

1 open Diversion v4.2.2
2 open Skynet v7.2.8
3 open FlexQoS v1.3.1
7 open unbound Manager v3.22
j2 open ntpMerlin v3.4.5


On the DNS Leak test it shows my WAN IP and not my Router IP it this corrcet?

 

[heysoundude]

I use ntpMerlin with chrony but sometimes the ntp server dont start or even after restart i dont know why.

you have to have a look at startup scripts, and add more wait time between steps...a few secs can make a BIG difference.
a lot of things won't work properly until the router has a correct sense of time/date/place...

 

[dave14305]

On the DNS Leak test it shows my WAN IP and not my Router IP it this corrcet?

Yes, your WAN IP should be seen on a leak test.

 

[SomeWhereOverTheRainBow]

Hello

Is there a way to see that unbound does realy work?

And is this sentences still right, because on the pre recommended settings it says something different.

Also on the website https://www.dnsleaktest.com/

should it show the router ip as my dns?

As @dave14305 has pointed out, you should see your wan IP address as your IP for dnsleaktest.com (possibly even your ISP hostname attached a long with it.). Another method is to look at your unbound statistics to see if your cache is growing in usage. Another option is to type pidof unbound into your router SSH terminal command line. You should see it return a number if unbound is running; however, this does not provide any indication of what clients are actually using it.

 

[raion969]

you have to have a look at startup scripts, and add more wait time between steps...a few secs can make a BIG difference.
a lot of things won't work properly until the router has a correct sense of time/date/place...

How can i add more wait time?

 

[JAX1337]

Is there a way to see that unbound does realy work?

Yes

Netdata

 

[heysoundude]

so i have the rt-ac5300 with the latest merlin firmware and also the latest unbound firmware.

I use ntpMerlin with chrony but sometimes the ntp server dont start or even after restart i dont know why.

When I initially replied, I had forgotten about this: https://www.snbforums.com/threads/ntp-boot-watchdog-script.71069/