DNSSEC doesn't work with local-unbound

F

frankit60

Why doesn't DNSSEC work with local-unbound?
How do I fix it? Does anyone have an idea?
Thanks in advance
Franco


Code: 
#
# cat /var/unbound/forward.conf
# This file was generated by local-unbound-setup.
# Modifications will be overwritten.
forward-zone:
    name: .
    forward-addr: 8.8.8.8
    forward-addr: 192.168.1.211
    forward-addr: 1.1.1.1
#
#
# drill -S FreeBSD.org @192.168.1.211
;; Number of trusted keys: 2
;; Chasing: freebsd.org. A

DNSSEC Trust tree:
FreeBSD.org. (A)
|---freebsd.org. (DNSKEY keytag: 55789 alg: 8 flags: 256)
    |---freebsd.org. (DNSKEY keytag: 33175 alg: 8 flags: 257)
    |---freebsd.org. (DS keytag: 33175 digest type: 2)
        |---org. (DNSKEY keytag: 25488 alg: 8 flags: 256)
            |---org. (DNSKEY keytag: 26974 alg: 8 flags: 257)
            |---org. (DS keytag: 26974 digest type: 2)
                |---. (DNSKEY keytag: 57780 alg: 8 flags: 256)
                    |---. (DNSKEY keytag: 20326 alg: 8 flags: 257)
;; Chase successful
#
#
# drill -S FreeBSD.org @192.168.1.1
;; Number of trusted keys: 2
;; Chasing: freebsd.org. A

DNSSEC Trust tree:
FreeBSD.org. (A)
|---freebsd.org. (DNSKEY keytag: 55789 alg: 8 flags: 256)
    |---freebsd.org. (DNSKEY keytag: 33175 alg: 8 flags: 257)
    |---freebsd.org. (DS keytag: 33175 digest type: 2)
        |---org. (DNSKEY keytag: 25488 alg: 8 flags: 256)
            |---org. (DNSKEY keytag: 26974 alg: 8 flags: 257)
            |---org. (DS keytag: 26974 digest type: 2)
                |---. (DNSKEY keytag: 57780 alg: 8 flags: 256)
                    |---. (DNSKEY keytag: 20326 alg: 8 flags: 257)
;; Chase successful
#
#
# drill -S FreeBSD.org @127.0.0.1
;; Number of trusted keys: 2
;; Chasing: freebsd.org. A

DNSSEC Trust tree:
FreeBSD.org. (A)
|---freebsd.org. (DNSKEY keytag: 55789 alg: 8 flags: 256)
    |---freebsd.org. (DNSKEY keytag: 33175 alg: 8 flags: 257)
    |---freebsd.org. (DS keytag: 33175 digest type: 2)
No trusted keys found in tree: first error was: No DNSSEC public key(s)
;; Chase failed.
#
#
 
I made a tutorial on setting up Unbound with dnscrypt proxy and quad 9

dont know if that helps

NapoleonWils0n

Thread 'unbound dns server with dnscrypt-proxy and quad9 on Freebsd'


Setting up the unbound dns server with dnscrypt-proxty and quad9 dns resolver on Freebsd

Quad9 is a free service that replaces your default ISP or enterprise Domain Name Server (DNS) configuration.

Quad9 blocks lookups of malicious host names from an up-to-the-minute list of threats. The Quad9 DNS serviceis operated by the Swiss-based Quad9 Foundation, whose mission is to provide a safer and more robust Internet for everyone.

I also cover setting up a split openvpn route using fibs that allows you to send command line or gui application over the vpn or your regular...
 
You must log in or register to reply here.
Back
Top