Maintained by: NLnet Labs

[Unbound-users] Can't get Unbound caching/recursive server to answer on outside IP

unbound at fongaboo.com
Tue Nov 4 19:07:36 CET 2014


Have a FreeBSD 10 machine. Have two outside IPs bound to it. First IP has NSD 
running as an authoritative server. This is specified specifically in the 
interface entry of nsd.conf.

Trying to run caching/recursive nameserver with unbound on the second IP. I 
specified the following entries in unbound.conf:

     interface: 127.0.0.1
     interface: <Second IP>


I followed the tutorial at https://calomel.org/unbound_dns.html. I added lines 
for unbound-control. But other than that, and the extra interface lines, its as 
specified in the tutorial... Oh, also the locations are modified from 
/var/unbound/etc/ to /var/unbound/.

I can get it to resolve when I run nslookup and set the server to 127.0.0.1, 
but not when I set it to the second IP.

BTW, I have this in IPFW:

allow udp from any to any dst-port 53 in


Any ideas why I can't get answers on the second IP?


  -------------------------------------------------------------------------
  shot through the heart              ooh baby do you know what that's worth
  and you're to blame                         ooh heaven is a place on earth
  darling you give love                  they say in heaven love comes first
  a bad name                              we'll make heaven a place on earth
  ORBITAL                                                     "Halcyon Live"