-
Quelle: Unbound
-
sudo apt install unbound
-
repeat all six month
wget -O root.hints https://www.internic.net/domain/named.root
sudo mv root.hints /var/lib/unbound/
-
sudo nano /etc/unbound/unbound.conf.d/pi-hole.conf
Content: pi-hole.conf
-
sudo service unbound start
dig pi-hole.net @127.0.0.1 -p 5335
-
Test
dig sigfail.verteiltesysteme.net @127.0.0.1 -p 5335
dig sigok.verteiltesysteme.net @127.0.0.1 -p 5335
-
Finally
configure Pi-hole to use your recursive DNS server by specifying 127.0.0.1#5335 as the Custom DNS (IPv4):
/admin/ >> Settings >> DNS
-
disable "Upstream DNS Servers"
- enable Custom 1 (IPv4) with 127.0.0.1#5335
- save
-
Use DNSSEC
/admin/ >> Settings >> DNS >> Use DNSSEC
-
use your recursive DNS server
sudo nano /etc/dhcpcd.conf
change
static domain_name_servers=127.0.0.1
and clear content of
sudo nano /etc/resolv.conf
disable unbound-resolvconf.service
sudo systemctl status unbound-resolvconf.service
sudo systemctl disable unbound-resolvconf.service
sudo systemctl stop unbound-resolvconf.service
sudo systemctl restart dhcpcd