JemTheWire
Senior Member
Can I ask, at the risk of being stupid, if I am using Skynet, is enabling the DNS Firewall in Unbound recommended? Or is it best to use one OR the other?
Skynet enhances the real firewall on your router from known bad-guys, both inbound and outbound. The RPZ feature simulates an outbound DNS firewall similar to how other host-based ad-blocking solutions do, so I'd say you need both (if you think the DNS Firewall feature is robust enough to be worthwhile yet). Free source data seems scarce at the moment.Can I ask, at the risk of being stupid, if I am using Skynet, is enabling the DNS Firewall in Unbound recommended? Or is it best to use one OR the other?
see this post and follow-up post, i.e. @jusched's implementation refreshes the URLHaus filter list every 15 minutes.Can I ask, at the risk of being stupid, if I am using Skynet, is enabling the DNS Firewall in Unbound recommended? Or is it best to use one OR the other?
Well it is nice to know the release is ahead of schedule. Just keep it as dev until all the bugs are worked out.Whoops Hotfix v3.03 Github md5=cef422d41ee5a36c4472694b34164dc4
'unbound_manager' didn't download 'rpzsites' file due to new functionality that I hadn't actually fully implemented in the script but had only gone-live in my head
Abject apologies @JGrana for the inconvenience caused.
Got it!
Like I said not sure if anyone will actually manually add entries to 'rpzsites'?
Thanks.Done. Pushed v1.2.0 to github.
Overwrite 'unbound.conf.firewall' y/n?
The next invocation of the scheduled cron job will use the new 'blocklist'@juched
If I have modified the adblock blockfiles file with an addition, how do I force it to download the new block list? Thanks!
I have the Adblocker and Firewall functional. Thanks for the hard work to all involved.
edit: I assumed a uninstall/reinstall...no issues...
0 5 * * * /opt/var/lib/unbound/adblock/gen_adblock.sh #adblock#
People shoulnd't create the unbound.conf.firewall, they should update the rpzsites and let it generate that file.Thanks.
Also, as a courtesy, (in the same way I don't overwrite your Ad Block 'blocksites' etc.), if the file already exists should you prompt
e.g.
just in case someone has customised the file locally, and needs to either reinstall unbound or explicitly DISABLE/ENABLE the DNS Firewall (unlikely I know )Code:Overwrite 'unbound.conf.firewall' y/n?
The next invocation of
No.Thanks @Martineau .
When I review the unbound.conf file now, the RPZ block at the end is commented out. Do we need to uncomment for firewall functionality?
include: "/opt/share/unbound/configs/unbound.conf.firewall" # Custom DNS Firewall
No.
'unbound_manager' has now deprecated the static DNS Firewall commented block in favour of the more flexible
Code:include: "/opt/share/unbound/configs/unbound.conf.firewall" # Custom DNS Firewall
if all you have is configs in this directory, you could just make one solid directory and define it as a single one line in the unbound.conf fileNo.
'unbound_manager' has now deprecated the static DNS Firewall commented block in favour of the more flexible
Code:include: "/opt/share/unbound/configs/unbound.conf.firewall" # Custom DNS Firewall
include: "/opt/share/unbound/configs/*"
include: "/opt/share/unbound/configs/*.conf"
Depending on how much you done to your router i.e. jumping from built in DOT and Unbound, you might have to reset and start from scratch. I know I did. I'm currently on DoT but will def try unbound again. Its come a long way.What used to be a lean, mean recursive DNS SERVER now seems to have evolved into a bloated mess. No matter what I try, amtm will not install unbound. Keep getting errors and I am unable to resolve them. Oh well, it was good while it lasted. Back to Quad9.
Welcome To SNBForums
SNBForums is a community for anyone who wants to learn about or discuss the latest in wireless routers, network storage and the ins and outs of building and maintaining a small network.
If you'd like to post a question, simply register and have at it!
While you're at it, please check out SmallNetBuilder for product reviews and our famous Router Charts, Ranker and plenty more!