Configure DNS filtering in unbound

Unbound
1

Hi,

Do you have an example of unbound as DNS filtering (similarly to nxfilter)?

I see that unbound has thousand of options to customize its role, I’m not sure of what options to use

I would like to block facebook/youtube/whatsapp/spotify and many other entertainment sites (on demand) to not be accessible from some machines.

Thanks!

2

Hi,

https://medium.com/nlnetlabs/response-policy-zones-in-unbound-5d453de75f26

3

+1 for RPZ in unbound, it's been great to use for DNS filtering at home.

4

Thanks!

Here are the links to blog posts. Note, we moved our blog post to our own nlnetlabs.nl domain.

RPZ: https://blog.nlnetlabs.nl/response-policy-zones-in-unbound/

Client-based filtering: https://blog.nlnetlabs.nl/client-based-filtering-in-unbound/

Best,

-- Benno

5

That's interesting.

How do I configure an ACL such that access to stubs (local authority) is allowed while the rest is denied, with the possibility to add exceptions (public resolvers)?

Thanks.