Unbound unbound_manager (Manager/Installer utility for unbound - Recursive DNS Server)

[Marin]

You'll have to Accept DNS Configuration = Exclusive in the OpenVPN Client screen to use NordVPN DNS. You can use unbound over the OpenVPN tunnel by setting Accept DNS Configuration = Disabled. But since NordVPN uses their DNS as a proxy, you won't be able to stream using the tunnel. You can still use unbound for any traffic you route to the WAN.

I have always used it with the Disabled option on and never had any issues with Netflix streaming.


Sent from my iPhone using Tapatalk

 

[Chris_J]

You'll have to Accept DNS Configuration = Exclusive in the OpenVPN Client screen to use NordVPN DNS. You can use unbound over the OpenVPN tunnel by setting Accept DNS Configuration = Disabled. But since NordVPN uses their DNS as a proxy, you won't be able to stream using the tunnel. You can still use unbound for any traffic you route to the WAN.

So I could still use your script and have OVPN Client 1 set to DNS = exclusive, route all streaming devices over this. DNS queries will be encrypted over the tunnel anyway, for added privacy. Then OVPN 2 set to DNS = disabled and have laptops etc.using this tunnel, with Unbound and Diversion hopefully still working.

As you know, I also use YazFi religiously, so if anything breaks with my current setup, it's going to come down like a house of cards!

 

[Xentrk]

So I could still use your script and have OVPN Client 1 set to DNS = exclusive, route all streaming devices over this. DNS queries will be encrypted over the tunnel anyway, for added privacy. Then OVPN 2 set to DNS = disabled and have laptops etc.using this tunnel, with Unbound and Diversion hopefully still working.

As you know, I also use YazFi religiously, so if anything breaks with my current setup, it's going to come down like a house of cards!

Yes! You got it.

 

[Chris_J]

I have always used it with the Disabled option on and never had any issues with Netflix streaming.

I'd be interested to know how you've managed to get this to work with Netflix. Nothing works for me over a VPN client, unless I set it to exclusive using NordVPN. I will always get the proxy error message, even if I force DNS to NordVPN servers with DNS filter or YazFi.

 

[Marin]

I'd be interested to know how you've managed to get this to work with Netflix. Nothing works for me over a VPN client, unless I set it to exclusive using NordVPN. I will always get the proxy error message, even if I force DNS to NordVPN servers with DNS filter or YazFi.

This is server dependent. Start by contacting NordVPN and asking them to give you a list of servers that allow you to stream and their location. Then determine which one is closer to your location and go from there. If you can’t find what you want then pick the server that you really want for your location and speed and use the @Xentrk’s Routing utility which works wonders.


Sent from my iPhone using Tapatalk

 

[kernol]

The original SME insisted on an 'easy' install, so when the script is invoked from amtm the menu is in 'Easy' mode.

i.e. As per the GitHub Hints/Tips

Easy mode
Advanced Mode​

So in 'Easy' mode you only have two options:

1. Install unbound (NO options)
2. Install unbound (ALL options)

Personally I didn't agree with this but (its a long story) so if you enter

e  = Exit Script

E:Option ==> advanced

you will be presented with the 'Advanced' menu so if you enter

e  = Exit Script

A:Option ==> i

you will be prompted to reply 'Y' to each of the available options, or alternatively you can invoke an Unattended install

Noted.

I really enjoyed "seeing" unbound make it into the amtm menu - but can't say the same about "using" option 7 within amtm .

Can we not perhaps have an option 4 = unbound_manager [After installation for Advanced use only] ???

I find myself simply opening another SSH session and using command "unbound_manager" at the prompt to get to the stuff I want - so don't use the menu item in amtm. Maybe others in the same boat?

EDIT: - To be clear - I'd like to see precisely the same screen as I get with unbound_manager command at the SSH prompt when selecting a "new" item 4 from the amtm unbound menu item 7

 

[Martineau]

I really enjoyed "seeing" unbound make it into the amtm menu - but can't say the same about "using" option 7 within amtm .

Can we not perhaps have an option 4 = unbound_manager [After installation for Advanced use only] ???

I find myself simply opening another SSH session and using command "unbound_manager" at the prompt to get to the stuff I want - so don't use the menu item in amtm. Maybe others in the same boat?

EDIT: - To be clear - I'd like to see precisely the same screen as I get with unbound_manager command at the SSH prompt when selecting a "new" item 4 from the amtm unbound menu item 7

First-time users would undoubtedly be intimidated by the 'Advanced' mode so (initially) using 'Easy' mode from amtm makes sense - not everyone is as tech-savvy as your good self.

For v2.06 - click the 'Advanced Mode' link at the top of post #1 for a solution.

 

[kernol]

First-time users would undoubtedly be intimidated by the 'Advanced' mode so (initially) using 'Easy' mode from amtm makes sense - not everyone is as tech-savvy as your good self.

For v2.06 - click the 'Advanced Mode' link at the top of post #1 for a solution.

I got that to begin with ... but that means typing "advanced" [8 characters] into the Options-> prompt - and even then we don't get the same screen presentation [options] as one does with unbound_manager at the SSH command prompt.

I use MobaXterm for SSH - so still quicker to not bother with amtm for unbound - open mobaxterm [one click] up-arrow [one click] and "unbound_manager" is auto-recalled to shell prompt [one click] and I'm there . [nine clicks pays three].

No worries - just saying ... and I do know you didn't get what you wanted on amtm to begin with.

 

[Martineau]

I got that to begin with ... but that means typing "advanced" [8 characters] into the Options-> prompt - and even then we don't get the same screen presentation [options] as one does with unbound_manager at the SSH command prompt.

Can you please supply screen-shots to show the differences.

 

[Martineau]

Just REBOOTED, and logged into SSH and started unbound_mangler.

 unbound_manager

+======================================================================+
|  Welcome to the unbound Manager/Installation script (Asuswrt-Merlin) |
|                                                                      |
|                      Version 2.07 by Martineau                       |
|                                                                      |
| Requirements: USB drive with Entware installed                       |
|                                                                      |
|   1 = Install unbound DNS Server                                     |
|                                                                      |
|   2 = Install unbound DNS Server - Advanced Mode        Auto Install |
|       o1. Enable unbound Logging                             YES     |
|       o2. Integrate with Stubby                               no     |
|       o3. Install Ad and Tracker Blocking                     no     |
|       o4. Customise CPU/Memory usage (Advanced Users)        YES     |
|       o5. Disable Firefox DNS-over-HTTPS (DoH) (USA users)    no     |
|                                                                      |
|   3 = Advanced Tools                                                 |
|                                                                      |
|     See SNBForums thread https://tinyurl.com/s89z3mm for helpful     |
|         user tips on unbound usage/configuration.                    |
+======================================================================+

unbound (pid 2519) is running... uptime: 646 days 09:17:13 version: 1.9.6 # rgnldo Github Version=v1.03 Martineau update (Date Loaded by unbound_manager Mon Feb 10 12:58:47 GMT 2020)

u = Push to Github PENDING for (Major) unbound_manager UPDATE v2.07 >>>> v2.06

1  = Update unbound Installation  ('/opt/var/lib/unbound/')
2  = Update unbound Installation Advanced Mode ('/opt/var/lib/unbound/')
3  = Advanced Tools

    
e  = Exit Script

E:Option ==> e

The reported uptime is very strange "646 days 09:17:13"

but unbound/unbound-control do seem to insist that 55847882 seconds is the correct value!

unbound-control status

version: 1.9.6
verbosity: 1
threads: 1
modules: 2 [ validator iterator ]
uptime: 55847882 seconds
options: reuseport control(ssl)
unbound (pid 2519) is running...

yet clearly I have just REBOOTED and only physically been up 180 seconds

uptime

 14:23:42 up 3 min,  load average: 2.02, 1.20, 0.50
admin@RT-AC86U-6160:/jffs/scripts#

Just wondered if anyone else has noticed this?

FYI @Mutzli just to add a datapoint that unbound does (for me) correctly auto-restart after a REBOOT.

 

[skeal]

Just REBOOTED, and logged into SSH and started unbound_mangler.

 unbound_manager

+======================================================================+
|  Welcome to the unbound Manager/Installation script (Asuswrt-Merlin) |
|                                                                      |
|                      Version 2.07 by Martineau                       |
|                                                                      |
| Requirements: USB drive with Entware installed                       |
|                                                                      |
|   1 = Install unbound DNS Server                                     |
|                                                                      |
|   2 = Install unbound DNS Server - Advanced Mode        Auto Install |
|       o1. Enable unbound Logging                             YES     |
|       o2. Integrate with Stubby                               no     |
|       o3. Install Ad and Tracker Blocking                     no     |
|       o4. Customise CPU/Memory usage (Advanced Users)        YES     |
|       o5. Disable Firefox DNS-over-HTTPS (DoH) (USA users)    no     |
|                                                                      |
|   3 = Advanced Tools                                                 |
|                                                                      |
|     See SNBForums thread https://tinyurl.com/s89z3mm for helpful     |
|         user tips on unbound usage/configuration.                    |
+======================================================================+

unbound (pid 2519) is running... uptime: 646 days 09:17:13 version: 1.9.6 # rgnldo Github Version=v1.03 Martineau update (Date Loaded by unbound_manager Mon Feb 10 12:58:47 GMT 2020)
No I just rebooted and have an uptime of just over a 5 minutes.
u = Push to Github PENDING for (Major) unbound_manager UPDATE v2.07 >>>> v2.06

1  = Update unbound Installation  ('/opt/var/lib/unbound/')
2  = Update unbound Installation Advanced Mode ('/opt/var/lib/unbound/')
3  = Advanced Tools

   
e  = Exit Script

E:Option ==> e

The reported uptime is very strange "646 days 09:17:13"

but unbound/unbound-control do seem to insist that 55847882 seconds is the correct value!

unbound-control status

version: 1.9.6
verbosity: 1
threads: 1
modules: 2 [ validator iterator ]
uptime: 55847882 seconds
options: reuseport control(ssl)
unbound (pid 2519) is running...

as clearly I have just REBOOTED and only physically been up 180 seconds

uptime

 14:23:42 up 3 min,  load average: 2.02, 1.20, 0.50
admin@RT-AC86U-6160:/jffs/scripts#

Just wondered if anyone else has noticed this?

FYI @Mutzli just to add a datapoint that unbound does (for me) correctly auto-restart after a REBOOT.

Nope.

 

[L&LD]

@Martineau, is v2.07 live or still under development?

Unbound shows no updates here.

 

[dave14305]

Just REBOOTED, and logged into SSH and started unbound_mangler.

 unbound_manager

+======================================================================+
|  Welcome to the unbound Manager/Installation script (Asuswrt-Merlin) |
|                                                                      |
|                      Version 2.07 by Martineau                       |
|                                                                      |
| Requirements: USB drive with Entware installed                       |
|                                                                      |
|   1 = Install unbound DNS Server                                     |
|                                                                      |
|   2 = Install unbound DNS Server - Advanced Mode        Auto Install |
|       o1. Enable unbound Logging                             YES     |
|       o2. Integrate with Stubby                               no     |
|       o3. Install Ad and Tracker Blocking                     no     |
|       o4. Customise CPU/Memory usage (Advanced Users)        YES     |
|       o5. Disable Firefox DNS-over-HTTPS (DoH) (USA users)    no     |
|                                                                      |
|   3 = Advanced Tools                                                 |
|                                                                      |
|     See SNBForums thread https://tinyurl.com/s89z3mm for helpful     |
|         user tips on unbound usage/configuration.                    |
+======================================================================+

unbound (pid 2519) is running... uptime: 646 days 09:17:13 version: 1.9.6 # rgnldo Github Version=v1.03 Martineau update (Date Loaded by unbound_manager Mon Feb 10 12:58:47 GMT 2020)

u = Push to Github PENDING for (Major) unbound_manager UPDATE v2.07 >>>> v2.06

1  = Update unbound Installation  ('/opt/var/lib/unbound/')
2  = Update unbound Installation Advanced Mode ('/opt/var/lib/unbound/')
3  = Advanced Tools

   
e  = Exit Script

E:Option ==> e

The reported uptime is very strange "646 days 09:17:13"

but unbound/unbound-control do seem to insist that 55847882 seconds is the correct value!

unbound-control status

version: 1.9.6
verbosity: 1
threads: 1
modules: 2 [ validator iterator ]
uptime: 55847882 seconds
options: reuseport control(ssl)
unbound (pid 2519) is running...

yet clearly I have just REBOOTED and only physically been up 180 seconds

uptime

 14:23:42 up 3 min,  load average: 2.02, 1.20, 0.50
admin@RT-AC86U-6160:/jffs/scripts#

Just wondered if anyone else has noticed this?

FYI @Mutzli just to add a datapoint that unbound does (for me) correctly auto-restart after a REBOOT.

Did Unbound start before the clock was synced and you're seeing an unsigned integer issue?

 

[^Tripper^]

The reported uptime is very strange "646 days 09:17:13"

but unbound/unbound-control do seem to insist that 55847882 seconds is the correct value!

Just noticed this as well! It’s not just on your system apparently.

@L&LD I tried your tweaks on my 86U, everything seemed good for a few hours but then i started having slowdowns on resolving addresses.

I’ve reinstalled unbound with the default settings. All looks fine for now.

 

[kernol]

Can you please supply screen-shots to show the differences.

My bad - sorry - screen options the same - but would still be a treat to just have Option 4 on menu to get there .
It helps also when exit unbound back to amtm - then need to return to unbound again from amtm - just "4" instead of "advanced".

I'm fairly confident that MOST members who have already installed unbound [whether via amtm or not] - will likely be wanting quick and easy access to unbound_manager "advanced" - which is different to taking the Option 2 [Advanced install mode] or Option 3 [Advanced Tools].
I guess the terminology is half the head-ache with all these "advanced" options thrown in .

 

[Stevens243]

Man, I opened SSH and typed "unbound_mangler" and some dude popped out of my closet with a machete.

 

[dave14305]

Today: 2/10/2020 10:02
Default Build Time: 5/5/2018 0:05
Difference in days: -646.41

 

[Stevens243]

unbound (pid 2387) is running... uptime: 0 Days, 00:16:04 version: 1.9.6 # rgnldo Github Version=v1.03 Martineau update (Date Loaded by unbound_manager Sun Feb 9 07:25:19 PST 2020)

 

[kernol]

@Martineau, is v2.07 live or still under development?

Unbound shows no updates here.

Need the secret code mentioned in post #50 here ...
https://www.snbforums.com/threads/r...recursive-dns-server.61669/page-3#post-548550

 

[L&LD]

@L&LD I tried your tweaks on my 86U, everything seemed good for a few hours but then i started having slowdowns on resolving addresses.

I’ve reinstalled unbound with the default settings. All looks fine for now.

Curious about what your ISP connection is? Could it be a possible issue with a Fibre vs. Cable or a DSL connection issue? Or something else, somewhat related?