This is an old revision of the document!
DNS
- Download Unbound DNS Server here - https://www.nlnetlabs.nl/projects/unbound/download/
- Download / Install Windows version on your Windows Machine - keep default setting
- replace the server.conf with sample below - located - in C:\Program Files\Unbound -
- Restart the Service “Unbound DNS Validator”
Useful Links
- https://www.linux-magazine.com/Issues/2019/227/Local-DNS-with-Unbound/(offset)/3/(tagID)/313
Unbound - example config with Local DNS Zone
- server.conf
# Unbound configuration file on windows. # See example.conf for more settings and syntax server: # verbosity level 0-4 of logging verbosity: 0 # On windows you may want to make all the paths relative to the # directory that has the executable in it (unbound.exe). Use this. #directory: "%EXECUTABLE%" # if you want to log to a file use logfile: "C:\unbound.log" # or use "unbound.log" and the directory clause above to put it in # the directory where the executable is. # on Windows, this setting makes reports go into the Application log # found in ControlPanels - System tasks - Logs #use-syslog: yes # on Windows, this setting adds the certificates from the Windows # Cert Store. For when you want to use forwarders with TLS. #tls-win-cert: yes # example with a 120 second TTL local-zone: "purplepi.ie." static local-data: "ucce-lab-cuic-b.purplepi.ie. 120 A 10.56.48.187" local-data: "ucce-lab-cuic-a.purplepi.ie. 120 A 10.56.47.187" local-data-ptr: "10.56.47.187 ucce-lab-cuic-a.purplepi.ie" local-data-ptr: "10.56.48.187 ucce-lab-cuic-b.purplepi.ie" # listen on all interfaces, answer queries from the local subnet. interface: 0.0.0.0 interface: ::0 # access control list access-control: 127.0.0.1/32 allow_snoop access-control: ::1 allow_snoop access-control: 127.0.0.0/8 allow #Allow DNS only from these specific IP addresses access-control: 10.55.1.132/32 allow access-control: 10.55.1.135/32 allow remote-control: # If you want to use unbound-control.exe from the command line, use #control-enable: yes #control-interface: 127.0.0.1 #control-use-cert: no