minimal-responses ?

Unbound
1

I needed a new resolver for some research I'm doing, and I had just
read recently about the various advantages of unbound, so I just
did my first ever install of the pre-built Unbound 1.6.8 package
on my FreeBSD system.

For my purposes, it is necessary to be able to get the authority
and additional sections in query responses.

Unfortunately, out of the box, this pre-built Unbound 1.6.8 that is
in the FreeBSD repository doesn't appear to provide those sections in
responses. At least that appears to be the case, based on the following
simple tests:

% dig www.google.com @127.0.0.1
% dig mx1.tristatelogic.com @127.0.0.1

I am getting neither authority nor additional sections in the responses
to the above queries.

Why not?

On the off chance that perhaps the unbound.conf(5) was simply wrong, and
that the actual default value for the minimal-responses configuration
parameter was actually "yes" rather than the purported value of "no"
I added the following explicitly to my /etc/unbound/unbound.conf file,
indented underneath the server: heading, and then restarted unbound:

  minimal-responses: no

Unfortunately, this sappears to have changed nothing, and I am still
failing to get the authority and additional sections back from my
queries.

What am I doing wrong?

What is the proper incantation needed in order to get unbound to actually
provide authority and additional sections in responses, e.g. to authorized
local clients?

2

Please ignore my prior message. I found the source of the problem.

It never occured to me that it might not be unbound that was suppressing
the authority and additional sections, but rather various authoritative
name servers that I was effectively asking unbound to query were
themselves suppressing / not sending out any authority and/or additional
sections, thus preventing unbound from giving me that which it did not
have to give in the first place.

3

"Ronald F. Guilmette via Unbound-users" writes:

>
>
> I needed a new resolver for some research I'm doing, and I had just
> read recently about the various advantages of unbound, so I just
> did my first ever install of the pre-built Unbound 1.6.8 package
> on my FreeBSD system.

Note that the pre-built unbound in the base system is likely not
what you want. To quote The FreeBSD handbook, Section 28.7.2:

  Unbound is provided in the FreeBSD base system. By default,
  it will provide DNS resolution to the local machine only.
  While the base system package can be configured to provide
  resolution services beyond the local machine, it is recommended
  that such requirements be addressed by installing Unbound
  from the FreeBSD Ports Collection.

  (<https://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/network-dns.html&gt;\)

FYI The ports has unbound 1.7.0

  jaap