Menu
What's new
By:
Filters Better Search

Unbound unbound_manager (Manager/Installer utility for unbound - Recursive DNS Server)

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

Good afternoon,
Martineau said:
Actually you meant to say 'unbound' rather than 'unbound_manager' - huge difference;)
Click to expand...
unbound indeed. I stand corrected.
I don't use IPv6 but for the purposes of generating say the 'forward-addr:' pair, then it's a simple text substitution of the static third column...not sure what your specific IPv6 unbound error message is?
Click to expand...
I know you do not. Yes I could not see anything obvious in the documentation. But I come across additional private network IPv6 clause in some examples. Will do some tests after work and happy to share the error.
:rolleyes: Yes, sadly stupidity on my part...shouldn't blindly copy'n'paste existing code and not actually review the output.:oops:
P.S. Use of 'tab' delimiters rather than 'spaces' in '/etc /hosts' will also cause unexpected output.:oops:
Click to expand...
No comment;)
 
Martineau said:
I have not written a complete equivalent parser for either the 'address=/' or 'server=/' dnsmasq directives, so lazily only 'expect' simple tripartite clauses.

Actually you meant to say 'unbound' rather than 'unbound_manager' - huge difference;)

I don't use IPv6 but for the purposes of generating say the 'forward-addr:' pair, then it's a simple text substitution of the static third column...not sure what your specific IPv6 unbound error message is?

:rolleyes: Yes, sadly stupidity on my part...shouldn't blindly copy'n'paste existing code and not actually review the output.:oops:
P.S. Use of 'tab' delimiters rather than 'spaces' in '/etc /hosts' will also cause unexpected output.:oops:
Click to expand...

dnsmasq also allows multiple hosts per address line:
address=/host1/host2/192.168.0.1

Not a very common setup maybe, but does impact me. Perhaps this is the same as the pixelsrv comment.

I also am thinking of tweaking a suggestion to handle dhcp-host options in dnsmasq.conf.add, as I have migrated out of the using the NVRAM option.
 
ok because of the entware problem, but I activated and installed everything and got the adblocker and YouTube adblocker going. however, despite successful installation, I have advertising everywhere, what can I do? I no longer have diversion installed and did a complete clean installation, but how can I block the ads with unbound, who has solutions? thank you
 
The downside of the current dnsmasq disable approach is that it only addresses manually assigned DHCP entries. It doesn't address resolution of regular DHCP hosts in /var/lib/misc/dnsmasq.leases.

I found my test script I wrote back in January to try to do this. In theory, you would run it every day (or in an interval similar to the DHCP lease time). The hosts path has been altered to pass the Cloudflare block on this site.
Code: 
#!/bin/sh

UNBOUNDLOCALHOSTS="/opt/var/lib/unbound/localhosts.conf"
LANDOMAIN="$(nvram get lan_domain)"

if [ /etc/ hosts.dnsmasq -nt $UNBOUNDLOCALHOSTS ] || [ /etc/ hosts -nt $UNBOUNDLOCALHOSTS ] || [ /var/lib/misc/dnsmasq.leases -nt $UNBOUNDLOCALHOSTS ]; then
        echo "local-zone: \"$LANDOMAIN.\" static" > $UNBOUNDLOCALHOSTS
        echo "local-data: \"$(nvram get lan_hostname).$LANDOMAIN. IN A $(nvram get lan_ipaddr)\"" >> $UNBOUNDLOCALHOSTS
        echo "local-data-ptr: \"$(nvram get lan_ipaddr) $(nvram get lan_hostname).$LANDOMAIN\"" >> $UNBOUNDLOCALHOSTS
        awk -v landomain="${LANDOMAIN}" '{ print "local-data: \""$2"."landomain".\tIN A "$1"\"\nlocal-data-ptr: \""$1"\t"$2"."landomain"\"" }' /etc/ hosts.dnsmasq >> $UNBOUNDLOCALHOSTS
        awk -v landomain="${LANDOMAIN}" '{ if( !($4=="*") ) print "local-data: \""$4"."landomain".\tIN A "$3"\"\nlocal-data-ptr: \""$3"\t"$4"."landomain"\"" }' /var/lib/misc/dnsmasq.leases >> $UNBOUNDLOCALHOSTS

        unbound-control reload
fi
In the end I didn't bother using it at all but I think it's at least worthwhile to account for the dnsmasq.leases file on a daily basis.
 
TCoreX said:
ok because of the entware problem, but I activated and installed everything and got the adblocker and YouTube adblocker going. however, despite successful installation, I have advertising everywhere, what can I do? I no longer have diversion installed and did a complete clean installation, but how can I block the ads with unbound, who has solutions? thank you
Click to expand...
What is the output of these commands
Code: 
grep "include.*adservers" /opt/var/lib/unbound/unbound.conf

awk 'END{print NR}' /opt/var/lib/unbound/adblock/adservers
 
Martineau said:
What is the output of these commands
Code: 
grep "include.*adservers" /opt/var/lib/unbound/unbound.conf

awk 'END{print NR}' /opt/var/lib/unbound/adblock/adservers
Click to expand...

Code: 
TCoreXxx@RT-AC86U-7968:/tmp/home/root# grep "include.*adservers" /opt/var/lib/unbound/unbound.conf include: /opt/var/lib/unbound/adblock/adservers                   TCoreXxx@RT-AC86U-7968:/tmp/home/root# awk 'END{print NR}' /opt/var/lib/unbound/adblock/adservers  57257
 
TCoreX said:
Code: 
TCoreXxx@RT-AC86U-7968:/tmp/home/root# grep "include.*adservers" /opt/var/lib/unbound/unbound.conf

 include: /opt/var/lib/unbound/adblock/adservers  

TCoreXxx@RT-AC86U-7968:/tmp/home/root# awk 'END{print NR}' /opt/var/lib/unbound/adblock/adservers

  57257
Click to expand...

Ensure the following line isn't commented out in 'unbound.conf'
Code: 
grep "log-local-actions.*yes" /opt/var/lib/unbound/unbound.conf
If it is commented out, then you need to use 'vx' to edit the file and uncomment the line, then view the live log
Code: 
e  = Exit Script [?]

E:Option ==> lo

unbound logging (Loglevel=1) ENABLED

/opt/var/lib/unbound/unbound.log (Loglevel=1)        Press CTRL-C to stop
and there should be NXDOMAIN messages for each blocked domain.
 
Slawek P said:
Yes auto-conversion after "dnsmasq disable" is really good , but could benefit from further additional tweaks in all three areas. Over the weekend, I will try to find this script and suggest/test something, need to read unbound documentation. Enabled dnsmasq back for time being. In my case
  • Hosts IPv6 records converted from - now prevent unbound_manager from starting
  • Strange asus names like www.asusnetwork.net and router.asus.com ended up with extra suffix for my local domain
  • address=/pixelserv/pixelserv.<homedomain>/<ip> from dnsmasq.conf.add did not quite convert either
Click to expand...
I've uploaded v3.16b Beta to GitHub dev which now displays an additional warning message if IPv6 is enabled before the dnsmasq bypass process being started.

The beta should now correct two of the above issues, but I'll leave the IPv6 records for now awaiting your feedback.
 
Martineau said:
I've uploaded v3.16b Beta to GitHub dev which now displays an additional warning message if IPv6 is enabled before the dnsmasq bypass process being started.

The beta should now correct two of the above issues, but I'll leave the IPv6 records for now awaiting your feedback.
Click to expand...
I have unistalled Diversion and installed pixelserv-tls directly from Entware + own startup and cron + awk based converter of adblock file from nxdomain to redirect.
I was not sure what is best way to restart unbound after such swap - what makes more sense?
Code: 
<replace adblock config>
unbound-control reload
unbound-control start
Or
Code: 
unbound-control stop
<replace adblock config>
unbound-control start

Now down to business. I have downloaded unbound_manager v3.16b and tried
Code: 
dnsmasq disable
Conversion works way better. IPv4 hosts now convert nicely.
Not exactly sure what is the purpose of last lines and where they come from (not from my configs), but..
unbound throws localhosts:135: error: unknown keyword 'yes'
Code: 
forward-zone:
        name: "127.0.0.1#53535"
        forward-addr:
        forward-first: yes
So yes, whoops. Commented out to see what else.

And IPv6 continues being disaster.
Code: 
[1590100426] unbound-checkconf[27154:0] error: error parsing local-data at 17 'myasus.local. IN A 2a02:dead:beef::1': Conversion error, ip4 addr expected
[1590100426] unbound-checkconf[27154:0] error: Bad local-data RR myasus.local. IN A 2a02:dead:beef::1
[1590100426] unbound-checkconf[27154:0] fatal error: failed local-zone, local-data configuration

I tried to add extra server side magic, but that did not help
Code: 
private-address: 2a02:dead:beef::/48
access-control: 2a02:dead:beef::/48 allow
Which makes me think perhaps this unbound version does not really like IPv6?
Or do we need DNS64 setting?
Or missing extra local-zone for some of local-data?
 
IPv6 records should be AAAA instead of A. It’s getting more complicated. Have the patience of a beta tester. ;)
 
Slawek P said:
I have unistalled Diversion and installed pixelserv-tls directly from Entware + own startup and cron + awk based converter of adblock file from nxdomain to redirect.
Code: 
[1590100426] unbound-checkconf[27154:0] error: error parsing local-data at 17 'myasus.local. IN A 2a02:dead:beef::1': Conversion error, ip4 addr expected
[1590100426] unbound-checkconf[27154:0] error: Bad local-data RR myasus.local. IN A 2a02:dead:beef::1
[1590100426] unbound-checkconf[27154:0] fatal error: failed local-zone, local-data configuration
Click to expand...
We need AAAA for IPV6 - of course!
local-data: "server.company.lan. IN AAAA 2001:db8:dead:beef::254"
 
dave14305 said:
IPv6 records should be AAAA instead of A. It’s getting more complicated. Have the patience of a beta tester. ;)
Click to expand...

Hmmm. I’ve a native v6 connection - could this be why I’m suddenly experiencing difficulties with Netflix streaming on my kodi HTPC, I wonder?


Sent from my iPhone using Tapatalk
 
heysoundude said:
Hmmm. I’ve a native v6 connection - could this be why I’m suddenly experiencing difficulties with Netflix streaming on my kodi HTPC, I wonder?


Sent from my iPhone using Tapatalk
Click to expand...
Did you have custom hostnames setup in dnsmasq for any of it?
 
juched said:
I also am thinking of tweaking a suggestion to handle dhcp-host options in dnsmasq.conf.add, as I have migrated out of the using the NVRAM option.
Click to expand...

I had stopped using NVRAM for storing dhcp host names/IP address years ago and went the dnsmasq.conf.add route. Much more flexible, easier to maintain, portable. Never looked back.
 
Martineau said:
Ensure the following line isn't commented out in 'unbound.conf'
Code: 
grep "log-local-actions.*yes" /opt/var/lib/unbound/unbound.conf
If it is commented out, then you need to use 'vx' to edit the file and uncomment the line, then view the live log
Code: 
e  = Exit Script [?]

E:Option ==> lo

unbound logging (Loglevel=1) ENABLED

/opt/var/lib/unbound/unbound.log (Loglevel=1)        Press CTRL-C to stop
and there should be NXDOMAIN messages for each blocked domain.
Click to expand...
E:Option ==> lo unbound logging (Loglevel=1) ENABLED /opt/var/lib/unbound/unbound.log (Loglevel=1) Press CTRL-C to stop May 22 14:11:44 unbound[2424:0] info: 0.131072 0.262144 276 May 22 14:11:44 unbound[2424:0] info: 0.262144 0.524288 135 May 22 14:11:44 unbound[2424:0] info: 0.524288 1.000000 54 May 22 14:11:44 unbound[2424:0] info: 1.000000 2.000000 11 May 22 14:11:46 unbound[13336:0] notice: init module 0: respip May 22 14:11:46 unbound[13336:0] notice: init module 1: validator May 22 14:11:46 unbound[13336:0] notice: init module 2: iterator May 22 14:11:46 unbound[13336:0] info: start of service (unbound 1.10.0). May 22 14:11:51 unbound_manager: '--': =================================================================================== Auto-Stopped Post-Install May 22 14:18:13 unbound_manager: 'lo': =================================================================================== Started Loglevel=1
May 22 14:18:15 unbound[13336:0] query: 127.0.0.1 secure-eu.imrworldwide.com. A IN
May 22 14:18:15 unbound[13336:0] reply: 127.0.0.1 secure-eu.imrworldwide.com. A IN NXDOMAIN 0.000000 1 44
May 22 14:18:15 unbound[13336:0] query: 127.0.0.1 secure-eu.imrworldwide.com. A IN
May 22 14:18:15 unbound[13336:0] reply: 127.0.0.1 secure-eu.imrworldwide.com. A IN NXDOMAIN 0.000000 1 44
May 22 14:18:16 unbound[13336:0] query: 127.0.0.1 lj034iiujhr5fkrnjip5fvfwfwfnj1590149751.uaid.imrworldwide.com. A IN
May 22 14:18:16 unbound[13336:0] reply: 127.0.0.1 lj034iiujhr5fkrnjip5fvfwfwfnj1590149751.uaid.imrworldwide.com. A IN NXDOMAIN 0.000000 1 79
May 22 14:18:16 unbound[13336:0] query: 127.0.0.1 lj034iiujhr5fkrnjip5fvfwfwfnj1590149751.uaid.imrworldwide.com. A IN
May 22 14:18:16 unbound[13336:0] reply: 127.0.0.1 lj034iiujhr5fkrnjip5fvfwfwfnj1590149751.uaid.imrworldwide.com. A IN NXDOMAIN 0.000000 1 79
May 22 14:18:18 unbound[13336:0] query: 127.0.0.1 secure-eu.imrworldwide.com. A IN
May 22 14:18:18 unbound[13336:0] reply: 127.0.0.1 secure-eu.imrworldwide.com. A IN NXDOMAIN 0.000000 1 44
May 22 14:18:18 unbound[13336:0] query: 127.0.0.1 secure-eu.imrworldwide.com. A IN
May 22 14:18:18 unbound[13336:0] reply: 127.0.0.1 secure-eu.imrworldwide.com. A IN NXDOMAIN 0.000000 1 44
May 22 14:18:21 unbound[13336:0] query: 127.0.0.1 secure-eu.imrworldwide.com. A IN
May 22 14:18:21 unbound[13336:0] reply: 127.0.0.1 secure-eu.imrworldwide.com. A IN NXDOMAIN 0.000000 1 44
May 22 14:18:21 unbound[13336:0] query: 127.0.0.1 secure-eu.imrworldwide.com. A IN
May 22 14:18:21 unbound[13336:0] reply: 127.0.0.1 secure-eu.imrworldwide.com. A IN NXDOMAIN 0.000000 1 44
May 22 14:18:24 unbound[13336:0] query: 127.0.0.1 lj034iiujhr5fkrnjip5fvfwfwfnj1590149751.uaid.imrworldwide.com. A IN
May 22 14:18:24 unbound[13336:0] reply: 127.0.0.1 lj034iiujhr5fkrnjip5fvfwfwfnj1590149751.uaid.imrworldwide.com. A IN NXDOMAIN 0.000000 1 79
May 22 14:18:24 unbound[13336:0] query: 127.0.0.1 lj034iiujhr5fkrnjip5fvfwfwfnj1590149751.uaid.imrworldwide.com. A IN
May 22 14:18:24 unbound[13336:0] reply: 127.0.0.1 lj034iiujhr5fkrnjip5fvfwfwfnj1590149751.uaid.imrworldwide.com. A IN NXDOMAIN 0.000000 1 79
May 22 14:18:25 unbound[13336:0] query: 127.0.0.1 secure-eu.imrworldwide.com. A IN
May 22 14:18:25 unbound[13336:0] reply: 127.0.0.1 secure-eu.imrworldwide.com. A IN NXDOMAIN 0.000000 1 44
May 22 14:18:25 unbound[13336:0] query: 127.0.0.1 secure-eu.imrworldwide.com. A IN
May 22 14:18:25 unbound[13336:0] reply: 127.0.0.1 secure-eu.imrworldwide.com. A IN NXDOMAIN 0.000000 1 44
May 22 14:18:28 unbound[13336:0] query: 127.0.0.1 secure-eu.imrworldwide.com. A IN
May 22 14:18:28 unbound[13336:0] reply: 127.0.0.1 secure-eu.imrworldwide.com. A IN NXDOMAIN 0.000000 1 44
May 22 14:18:28 unbound[13336:0] query: 127.0.0.1 secure-eu.imrworldwide.com. A IN
May 22 14:18:28 unbound[13336:0] reply: 127.0.0.1 secure-eu.imrworldwide.com. A IN NXDOMAIN 0.000000 1 44
May 22 14:18:31 unbound[13336:0] query: 127.0.0.1 secure-eu.imrworldwide.com. A IN
May 22 14:18:31 unbound[13336:0] reply: 127.0.0.1 secure-eu.imrworldwide.com. A IN NXDOMAIN 0.000000 1 44
May 22 14:18:31 unbound[13336:0] query: 127.0.0.1 secure-eu.imrworldwide.com. A IN
May 22 14:18:31 unbound[13336:0] reply: 127.0.0.1 secure-eu.imrworldwide.com. A IN NXDOMAIN 0.000000 1 44
May 22 14:18:32 unbound[13336:0] query: 127.0.0.1 lj034iiujhr5fkrnjip5fvfwfwfnj1590149751.uaid.imrworldwide.com. A IN
May 22 14:18:32 unbound[13336:0] reply: 127.0.0.1 lj034iiujhr5fkrnjip5fvfwfwfnj1590149751.uaid.imrworldwide.com. A IN NXDOMAIN 0.000000 1 79
May 22 14:18:32 unbound[13336:0] query: 127.0.0.1 lj034iiujhr5fkrnjip5fvfwfwfnj1590149751.uaid.imrworldwide.com. A IN
May 22 14:18:32 unbound[13336:0] reply: 127.0.0.1 lj034iiujhr5fkrnjip5fvfwfwfnj1590149751.uaid.imrworldwide.com. A IN NXDOMAIN 0.000000 1 79
May 22 14:18:34 unbound[13336:0] query: 127.0.0.1 secure-eu.imrworldwide.com. A IN
May 22 14:18:34 unbound[13336:0] reply: 127.0.0.1 secure-eu.imrworldwide.com. A IN NXDOMAIN 0.000000 1 44
May 22 14:18:34 unbound[13336:0] query: 127.0.0.1 secure-eu.imrworldwide.com. A IN
May 22 14:18:34 unbound[13336:0] reply: 127.0.0.1 secure-eu.imrworldwide.com. A IN NXDOMAIN 0.000000 1 44
May 22 14:18:37 unbound[13336:0] query: 127.0.0.1 secure-eu.imrworldwide.com. A IN
May 22 14:18:37 unbound[13336:0] reply: 127.0.0.1 secure-eu.imrworldwide.com. A IN NXDOMAIN 0.000000 1 44
May 22 14:18:37 unbound[13336:0] query: 127.0.0.1 secure-eu.imrworldwide.com. A IN
May 22 14:18:37 unbound[13336:0] reply: 127.0.0.1 secure-eu.imrworldwide.com. A IN NXDOMAIN 0.000000 1 44
May 22 14:18:40 unbound[13336:0] query: 127.0.0.1 lj034iiujhr5fkrnjip5fvfwfwfnj1590149751.uaid.imrworldwide.com. A IN
May 22 14:18:40 unbound[13336:0] reply: 127.0.0.1 lj034iiujhr5fkrnjip5fvfwfwfnj1590149751.uaid.imrworldwide.com. A IN NXDOMAIN 0.000000 1 79
May 22 14:18:40 unbound[13336:0] query: 127.0.0.1 lj034iiujhr5fkrnjip5fvfwfwfnj1590149751.uaid.imrworldwide.com. A IN
May 22 14:18:40 unbound[13336:0] reply: 127.0.0.1 lj034iiujhr5fkrnjip5fvfwfwfnj1590149751.uaid.imrworldwide.com. A IN NXDOMAIN 0.000000 1 79
May 22 14:18:41 unbound[13336:0] query: 127.0.0.1 secure-eu.imrworldwide.com. A IN
May 22 14:18:41 unbound[13336:0] reply: 127.0.0.1 secure-eu.imrworldwide.com. A IN NXDOMAIN 0.000000 1 44
May 22 14:18:41 unbound[13336:0] query: 127.0.0.1 secure-eu.imrworldwide.com. A IN
May 22 14:18:41 unbound[13336:0] reply: 127.0.0.1 secure-eu.imrworldwide.com. A IN NXDOMAIN 0.000000 1 44
May 22 14:18:44 unbound[13336:0] query: 127.0.0.1 secure-eu.imrworldwide.com. A IN
May 22 14:18:44 unbound[13336:0] reply: 127.0.0.1 secure-eu.imrworldwide.com. A IN NXDOMAIN 0.000000 1 44
May 22 14:18:44 unbound[13336:0] query: 127.0.0.1 secure-eu.imrworldwide.com. A IN
May 22 14:18:44 unbound[13336:0] reply: 127.0.0.1 secure-eu.imrworldwide.com. A IN NXDOMAIN 0.000000 1 44

Is that good or bad now? Advertising still available
 
Slawek P said:
I downgraded to 3.15 master, changed to AAAA for IPv6 records, corrected still mistranslated pixelserv dns entries and have unbound with dnsmasq disabled for both LAN and server use. Happy days.

Will investigate some of how to have nicers stats over the weekend...
https://nlnetlabs.nl/documentation/unbound/howto-statistics/
Click to expand...
I've uploaded a revised version of v3.16b2 on GitHub dev.

It doesn't cater for all possible dnsmasq syntax, but hopefully it should now work for your use case? (famous last words :D)
 
TCoreX said:
E:Option ==> lo unbound logging (Loglevel=1) ENABLED /opt/var/lib/unbound/unbound.log (Loglevel=1) Press CTRL-C to stop May 22 14:11:44 unbound[2424:0] info: 0.131072 0.262144 276 May 22 14:11:44 unbound[2424:0] info: 0.262144 0.524288 135 May 22 14:11:44 unbound[2424:0] info: 0.524288 1.000000 54 May 22 14:11:44 unbound[2424:0] info: 1.000000 2.000000 11 May 22 14:11:46 unbound[13336:0] notice: init module 0: respip May 22 14:11:46 unbound[13336:0] notice: init module 1: validator May 22 14:11:46 unbound[13336:0] notice: init module 2: iterator May 22 14:11:46 unbound[13336:0] info: start of service (unbound 1.10.0). May 22 14:11:51 unbound_manager: '--': =================================================================================== Auto-Stopped Post-Install May 22 14:18:13 unbound_manager: 'lo': =================================================================================== Started Loglevel=1
May 22 14:18:15 unbound[13336:0] query: 127.0.0.1 secure-eu.imrworldwide.com. A IN
May 22 14:18:15 unbound[13336:0] reply: 127.0.0.1 secure-eu.imrworldwide.com. A IN NXDOMAIN 0.000000 1 44
May 22 14:18:15 unbound[13336:0] query: 127.0.0.1 secure-eu.imrworldwide.com. A IN
May 22 14:18:15 unbound[13336:0] reply: 127.0.0.1 secure-eu.imrworldwide.com. A IN NXDOMAIN 0.000000 1 44
May 22 14:18:16 unbound[13336:0] query: 127.0.0.1 lj034iiujhr5fkrnjip5fvfwfwfnj1590149751.uaid.imrworldwide.com. A IN
May 22 14:18:16 unbound[13336:0] reply: 127.0.0.1 lj034iiujhr5fkrnjip5fvfwfwfnj1590149751.uaid.imrworldwide.com. A IN NXDOMAIN 0.000000 1 79
May 22 14:18:16 unbound[13336:0] query: 127.0.0.1 lj034iiujhr5fkrnjip5fvfwfwfnj1590149751.uaid.imrworldwide.com. A IN
May 22 14:18:16 unbound[13336:0] reply: 127.0.0.1 lj034iiujhr5fkrnjip5fvfwfwfnj1590149751.uaid.imrworldwide.com. A IN NXDOMAIN 0.000000 1 79
May 22 14:18:18 unbound[13336:0] query: 127.0.0.1 secure-eu.imrworldwide.com. A IN
May 22 14:18:18 unbound[13336:0] reply: 127.0.0.1 secure-eu.imrworldwide.com. A IN NXDOMAIN 0.000000 1 44
May 22 14:18:18 unbound[13336:0] query: 127.0.0.1 secure-eu.imrworldwide.com. A IN
May 22 14:18:18 unbound[13336:0] reply: 127.0.0.1 secure-eu.imrworldwide.com. A IN NXDOMAIN 0.000000 1 44
May 22 14:18:21 unbound[13336:0] query: 127.0.0.1 secure-eu.imrworldwide.com. A IN
May 22 14:18:21 unbound[13336:0] reply: 127.0.0.1 secure-eu.imrworldwide.com. A IN NXDOMAIN 0.000000 1 44
May 22 14:18:21 unbound[13336:0] query: 127.0.0.1 secure-eu.imrworldwide.com. A IN
May 22 14:18:21 unbound[13336:0] reply: 127.0.0.1 secure-eu.imrworldwide.com. A IN NXDOMAIN 0.000000 1 44
May 22 14:18:24 unbound[13336:0] query: 127.0.0.1 lj034iiujhr5fkrnjip5fvfwfwfnj1590149751.uaid.imrworldwide.com. A IN
May 22 14:18:24 unbound[13336:0] reply: 127.0.0.1 lj034iiujhr5fkrnjip5fvfwfwfnj1590149751.uaid.imrworldwide.com. A IN NXDOMAIN 0.000000 1 79
May 22 14:18:24 unbound[13336:0] query: 127.0.0.1 lj034iiujhr5fkrnjip5fvfwfwfnj1590149751.uaid.imrworldwide.com. A IN
May 22 14:18:24 unbound[13336:0] reply: 127.0.0.1 lj034iiujhr5fkrnjip5fvfwfwfnj1590149751.uaid.imrworldwide.com. A IN NXDOMAIN 0.000000 1 79
May 22 14:18:25 unbound[13336:0] query: 127.0.0.1 secure-eu.imrworldwide.com. A IN
May 22 14:18:25 unbound[13336:0] reply: 127.0.0.1 secure-eu.imrworldwide.com. A IN NXDOMAIN 0.000000 1 44
May 22 14:18:25 unbound[13336:0] query: 127.0.0.1 secure-eu.imrworldwide.com. A IN
May 22 14:18:25 unbound[13336:0] reply: 127.0.0.1 secure-eu.imrworldwide.com. A IN NXDOMAIN 0.000000 1 44
May 22 14:18:28 unbound[13336:0] query: 127.0.0.1 secure-eu.imrworldwide.com. A IN
May 22 14:18:28 unbound[13336:0] reply: 127.0.0.1 secure-eu.imrworldwide.com. A IN NXDOMAIN 0.000000 1 44
May 22 14:18:28 unbound[13336:0] query: 127.0.0.1 secure-eu.imrworldwide.com. A IN
May 22 14:18:28 unbound[13336:0] reply: 127.0.0.1 secure-eu.imrworldwide.com. A IN NXDOMAIN 0.000000 1 44
May 22 14:18:31 unbound[13336:0] query: 127.0.0.1 secure-eu.imrworldwide.com. A IN
May 22 14:18:31 unbound[13336:0] reply: 127.0.0.1 secure-eu.imrworldwide.com. A IN NXDOMAIN 0.000000 1 44
May 22 14:18:31 unbound[13336:0] query: 127.0.0.1 secure-eu.imrworldwide.com. A IN
May 22 14:18:31 unbound[13336:0] reply: 127.0.0.1 secure-eu.imrworldwide.com. A IN NXDOMAIN 0.000000 1 44
May 22 14:18:32 unbound[13336:0] query: 127.0.0.1 lj034iiujhr5fkrnjip5fvfwfwfnj1590149751.uaid.imrworldwide.com. A IN
May 22 14:18:32 unbound[13336:0] reply: 127.0.0.1 lj034iiujhr5fkrnjip5fvfwfwfnj1590149751.uaid.imrworldwide.com. A IN NXDOMAIN 0.000000 1 79
May 22 14:18:32 unbound[13336:0] query: 127.0.0.1 lj034iiujhr5fkrnjip5fvfwfwfnj1590149751.uaid.imrworldwide.com. A IN
May 22 14:18:32 unbound[13336:0] reply: 127.0.0.1 lj034iiujhr5fkrnjip5fvfwfwfnj1590149751.uaid.imrworldwide.com. A IN NXDOMAIN 0.000000 1 79
May 22 14:18:34 unbound[13336:0] query: 127.0.0.1 secure-eu.imrworldwide.com. A IN
May 22 14:18:34 unbound[13336:0] reply: 127.0.0.1 secure-eu.imrworldwide.com. A IN NXDOMAIN 0.000000 1 44
May 22 14:18:34 unbound[13336:0] query: 127.0.0.1 secure-eu.imrworldwide.com. A IN
May 22 14:18:34 unbound[13336:0] reply: 127.0.0.1 secure-eu.imrworldwide.com. A IN NXDOMAIN 0.000000 1 44
May 22 14:18:37 unbound[13336:0] query: 127.0.0.1 secure-eu.imrworldwide.com. A IN
May 22 14:18:37 unbound[13336:0] reply: 127.0.0.1 secure-eu.imrworldwide.com. A IN NXDOMAIN 0.000000 1 44
May 22 14:18:37 unbound[13336:0] query: 127.0.0.1 secure-eu.imrworldwide.com. A IN
May 22 14:18:37 unbound[13336:0] reply: 127.0.0.1 secure-eu.imrworldwide.com. A IN NXDOMAIN 0.000000 1 44
May 22 14:18:40 unbound[13336:0] query: 127.0.0.1 lj034iiujhr5fkrnjip5fvfwfwfnj1590149751.uaid.imrworldwide.com. A IN
May 22 14:18:40 unbound[13336:0] reply: 127.0.0.1 lj034iiujhr5fkrnjip5fvfwfwfnj1590149751.uaid.imrworldwide.com. A IN NXDOMAIN 0.000000 1 79
May 22 14:18:40 unbound[13336:0] query: 127.0.0.1 lj034iiujhr5fkrnjip5fvfwfwfnj1590149751.uaid.imrworldwide.com. A IN
May 22 14:18:40 unbound[13336:0] reply: 127.0.0.1 lj034iiujhr5fkrnjip5fvfwfwfnj1590149751.uaid.imrworldwide.com. A IN NXDOMAIN 0.000000 1 79
May 22 14:18:41 unbound[13336:0] query: 127.0.0.1 secure-eu.imrworldwide.com. A IN
May 22 14:18:41 unbound[13336:0] reply: 127.0.0.1 secure-eu.imrworldwide.com. A IN NXDOMAIN 0.000000 1 44
May 22 14:18:41 unbound[13336:0] query: 127.0.0.1 secure-eu.imrworldwide.com. A IN
May 22 14:18:41 unbound[13336:0] reply: 127.0.0.1 secure-eu.imrworldwide.com. A IN NXDOMAIN 0.000000 1 44
May 22 14:18:44 unbound[13336:0] query: 127.0.0.1 secure-eu.imrworldwide.com. A IN
May 22 14:18:44 unbound[13336:0] reply: 127.0.0.1 secure-eu.imrworldwide.com. A IN NXDOMAIN 0.000000 1 44
May 22 14:18:44 unbound[13336:0] query: 127.0.0.1 secure-eu.imrworldwide.com. A IN
May 22 14:18:44 unbound[13336:0] reply: 127.0.0.1 secure-eu.imrworldwide.com. A IN NXDOMAIN 0.000000 1 44

Is that good or bad now? Advertising still available
Click to expand...
Your unbound log shows successfully blocked domains.

However, there is at least one device on your LAN that is repeatedly hammering a couple of blocked domains...

e.g. 'secure-eu.imrworldwide.com'
Code: 
e  = Exit Script [?]

A:Option ==> dig http://secure-eu.imrworldwide.com

; <<>> DiG 9.14.8 <<>> txt http://secure-eu.imrworldwide.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18824
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1472
;; QUESTION SECTION:
;http://secure-eu.imrworldwide.com. IN TXT
;; AUTHORITY SECTION:
imrworldwide.com. 3600 IN SOA dns1.p03.nsone.net. hostmaster.nsone.net. 1590087427 300 300 3600 3600
;; Query time: 55 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Fri May 22 13:38:56 UTC 2020
;; MSG SIZE  rcvd: 127

; <<>> DiG 9.14.8 <<>> http://secure-eu.imrworldwide.com @127.0.0.1 -p 53
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10120
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1472
;; QUESTION SECTION:
;http://secure-eu.imrworldwide.com. IN A
;; AUTHORITY SECTION:
imrworldwide.com. 3600 IN SOA dns1.p03.nsone.net. hostmaster.nsone.net. 1590087427 300 300 3600 3600
;; Query time: 1 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Fri May 22 13:38:56 UTC 2020
;; MSG SIZE  rcvd: 127
and will now not open in a browser.

It all depends on which URL you are getting ads.
NOTE: SNB Forums is exempted from Ad Blocking as a courtesy.
 
You must log in or register to reply here.

Similar threads

M
Unbound Unable to make Unbound work
Replies
13
Views
1K
mangkoran
M
S
Unbound DHCP DNS same as WAN DNS based on merlin-dns-monitor.sh
Replies
0
Views
540
salvo
S
K
Unbound Correct options enabled?
Replies
0
Views
945
kapekohicafe
K
kuki68ster
ControlD Utility for routers...
Replies
1
Views
2K
L&LD
L&LD
J
DNS Privacy with Adguard + unbound
Replies
4
Views
2K
jata
J
Similar threads
Thread starter Title Forum Replies Date
muffintastic Unbound Force all DNS requests through Unbound using iptables? Asuswrt-Merlin AddOns 14
Z Unbound Unbound + AdGuard Settings Asuswrt-Merlin AddOns 1
Z Unbound Unbound on subnet router Asuswrt-Merlin AddOns 3
B Unbound Does unbound update automatically? Asuswrt-Merlin AddOns 8
F Unbound Unbound stopped working Asuswrt-Merlin AddOns 3
B Unbound Unbound whitelist Asuswrt-Merlin AddOns 15
Jack-Sparr0w Is it possible to use nord dns with unbound or any way to add it? Asuswrt-Merlin AddOns 9
Jack-Sparr0w Guide to using vpn with unbound dns? Asuswrt-Merlin AddOns 3
B Unbound Use unbound/router as default DNS server Asuswrt-Merlin AddOns 2
B Unbound Test unbound Asuswrt-Merlin AddOns 6

Similar threads

Latest threads

Support SNBForums w/ Amazon

If you'd like to support SNBForums, just use this link and buy anything on Amazon. Thanks!

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!

Staff online

Members online

Total: 807 (members: 36, guests: 771)
Top