[Unbound-users] Wishlist for unbound-control
wouter at NLnetLabs.nl
Mon Nov 7 12:47:37 CET 2011
-----BEGIN PGP SIGNED MESSAGE-----
On 11/07/2011 11:24 AM, Jan-Piet Mens wrote:
>> That was not possible, when I started using unbound. So I went the
> Indeed, and a good method that is. :)
> The only reason I started using unbound-control is because that's what
> DNSSEC-trigger uses to configure Unbound's forwarders when it detects
> a network configuration change, e.g. DHCP.
> I then also realized, that I can slip in an insecure resource record
> into a running Unbound -- a functionality I use quite frequently, though
> mainly for testing purposes.
> One missing function (at least for me) is now to be able to quickly add
> an insecure zone on the fly while I'm at a customer site, e.g. example.com.
> (Just a bit of background)
That could be an option to add to unbound-control.
You could do the Makefile-way, then restore the other settings with
dnssec-trigger-control reprobe (this will restore the unbound forward
And unbound-control list_local_data > store_file and then load it again
cat store_file | while read x; do unbound-control local_data "$x" ; done
This is a workaround, and you need to reload the daemon.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
-----END PGP SIGNATURE-----
More information about the Unbound-users