I am using Unbound as a local resolver, using OpenDNS to filter requests via: forward-zone: name: . forward-addr: 208.67.222.222 forward-addr: 208.67.220.220
When OpenDNS blocks a site, for example cporms.bankofamerica.com, I send the TLD to Google like this:
forward-zone: name: bankofamerica.com forward-addr: 8.8.8.8
Everything works fine – most of the time, however this morning I couldn’t resolve cporms.bankofamerica.com because the filter choked on srip.net
C:>dig +short cporms.bankofamerica.com
cporms-prod-2.eglobal2.bac.com.
cpo-sni-prodb.bankofamerica.com.srip.net.
srip677.globalredir.akadns.net.
a677.srip1.akasrip.net.f8e19fab.1.cn.akasripcn.net.
23.32.240.33
I ended up solving the problem by adding bac.com, srip.net, akadns.net & akasripcn.net to my list of forward zones. Is there a way to tell Unbound to let 8.8.8.8 handle the entire query in this situation?
My service.conf:
server: verbosity: 3 directory: “c:\KatyComputer.com\Utility\unbound” do-ip6: no logfile: unbound.log tls-win-cert: yes access-control: 127.0.0.0/8 allow access-control: 192.168.0.0/16 allow
remote-control: control-enable: no
server: auto-trust-anchor-file: root.key
forward-zone: name: bankofamerica.com forward-addr: 8.8.8.8
.
.
.
forward-zone: name: zyxel.com forward-addr: 8.8.8.8
forward-zone: name: . forward-addr: 208.67.222.222 forward-addr: 208.67.220.220