bind: improve documentation for 23.1.6, remove faulty advanced section

Better blocklist support exists in Unbound and since Bind can run as
standalone there is no need to transform the faulty advanced options
to the file-based override that Unbound still supports.
pull/468/head
Franco Fichtner 1 year ago
parent b9fbf01aa6
commit 0a0a607146

@ -16,8 +16,6 @@ At the time of writing the plugin is able to be used as a local resolver and as
nice replacement for pfBlockerNG or PiHole, since it is offering a DNSBL feature
via BIND Reverse Policy Zones.
For version 2.0 it is planned to offer full zone-file management.
------------
Installation
------------
@ -37,8 +35,9 @@ General Settings
Set the IPv6 addresses the daemon should listen on.
:Listen Port:
Set the port the daemon should listen on. Per default the port is 53530 to not
interfere with existing Unbound/dnsmasq setups. If you want to switch to BIND
only, make sure to stop Unbound and dnsmasq.
interfere with existing Unbound/Dnsmasq setups. If you want to switch to BIND
only, make sure to stop Unbound/Dnsmasq and switch to port 53 with both
0.0.0.0 and :: as listening addresses set up.
:DNS Forwarders:
@ -82,24 +81,3 @@ ACLs
On tab ACLs you can create ACLs used for configuration options like **Recursion**. Add
a new ACL via **+**, give it a **Name** and add as many networks as you wish in **Network List**.
--------
Advanced
--------
Maybe you want to stick with Unbound as your primary DNS and only use BIND for blacklisting,
you can set in :menuselection:`Services --> Unbound DNS --> General --> Custom Options`.
.. code-block:: none
do-not-query-localhost: no
forward-zone:
name: "."
forward-addr: 127.0.0.1@53530
.. Note::
When you are using Overrides in Unbound you can not use ``do-not-query-localhost``.
Please remove the line and let Bind listen to your LAN IP with port 53530 instead of localhost.
After this you can set the LAN IP in ``forward-addr``.

Loading…
Cancel
Save