Can't get Unbound caching/recursive server to answer on outside IP

freebsd at fongaboo.com freebsd at fongaboo.com
Mon Nov 3 01:56:40 UTC 2014


Have a FreeBSD 10 machine. Have two outside IPs bound to it. First IP has 
NSD running as an authoritative server. THis is specified specifically in 
the interface entry of nsd.conf.

Trying to run caching/recursive nameserver with unbound on the second IP. 
I specified the following entries in unbound.conf:

     interface: 127.0.0.1
     interface: <Second IP>


I followed the tutorial at https://calomel.org/unbound_dns.html. I added 
lines for unbound-control. But other than that, and the extra interface 
lines, its as specified in the tutorial... Oh, also the locations are 
modified from /var/unbound/etc/ to /var/unbound/.

I can get it to resolve when I run nslookup and set the server to 
127.0.0.1, but not when I set it to the second IP.

I'm wondering if something else is floating around on 127.0.0.1 port 53? 
Because when I run unbound-control dump_requestlist, I get an empty list. 
I would think I would see the requests I made successfully on 127.0.0.1.

BTW, I have this in IPFW:

allow udp from any to any dst-port 53 in


Any ideas why I can't get answers on the second IP?


  -------------------------------------------------------------------------
  shot through the heart              ooh baby do you know what that's worth
  and you're to blame                         ooh heaven is a place on earth
  darling you give love                  they say in heaven love comes first
  a bad name                              we'll make heaven a place on earth
  ORBITAL                                                     "Halcyon Live"



More information about the freebsd-questions mailing list