Solved DNS over TLS

[fernandel]

Hi!

I like to try DNS over TLS but I am not sure is it my way okay.

/etc/rc.conf.d/local_unbound
local_unbound_enable="YES"
local_unbound_tls="YES"
local_unbound_forwarders="addresses@853

Do I need some changes in /etc/resolv.conf? I have also SPKI and name. Do I need to use the and how, please?

Thank you.

 

[fernandel]

It doesnt work. Wrong settings.
I just run service local onestart and than edit /var/unbound/forward.conf and it works.

 

[fernandel]

Just one question more: I am using defaul "unbound" not from dns/unbound.
How I know if everythymg works correct.
Is tcpdump -vv -x -X -s 1500 -i bge0 'port 853'correct, please? I did open port 853 in firewall too.
Thank you.