From d09efef965d5626bd77d06591761fe22bef18ed7 Mon Sep 17 00:00:00 2001 From: Aminda Suomalainen Date: Thu, 19 Sep 2024 09:09:12 +0300 Subject: [PATCH] unbound/dot-provider-zones.conf: initial commit --- .../unbound.conf.d/dot-provider-zones.conf | 116 ++++++++++++++++++ 1 file changed, 116 insertions(+) create mode 100644 etc/unbound/unbound.conf.d/dot-provider-zones.conf diff --git a/etc/unbound/unbound.conf.d/dot-provider-zones.conf b/etc/unbound/unbound.conf.d/dot-provider-zones.conf new file mode 100644 index 00000000..793eb683 --- /dev/null +++ b/etc/unbound/unbound.conf.d/dot-provider-zones.conf @@ -0,0 +1,116 @@ +# This file attempts to send zones belonging to DNS operators to their DNS servers. +# Inclusion criteria: I know and use the service. + +server: + # Debian ca-certificates location + #tls-cert-bundle: /etc/ssl/certs/ca-certificates.crt + # Fedora + #tls-cert-bundle: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem + # Use system certificates no matter where they are + tls-system-cert: yes + # Quad9 says pointless performance impact on forwarders. + # https://docs.quad9.net/Quad9_For_Organizations/DNS_Forwarder_Best_Practices/#disable-qname-minimization + qname-minimisation: no + +forward-zone: + name: "google." + forward-tls-upstream: yes + forward-addr: 2001:4860:4860::8844@853#dns.google + forward-addr: 2001:4860:4860::8888@853#dns.google + forward-addr: 8.8.4.4@853#dns.google + forward-addr: 8.8.8.8@853#dns.google + +forward-zone: + name: "google.fi." + forward-tls-upstream: yes + forward-addr: 2001:4860:4860::8844@853#dns.google + forward-addr: 2001:4860:4860::8888@853#dns.google + forward-addr: 8.8.4.4@853#dns.google + forward-addr: 8.8.8.8@853#dns.google + +forward-zone: + name: "google.com." + forward-tls-upstream: yes + forward-addr: 2001:4860:4860::8844@853#dns.google + forward-addr: 2001:4860:4860::8888@853#dns.google + forward-addr: 8.8.4.4@853#dns.google + forward-addr: 8.8.8.8@853#dns.google + +forward-zone: + name: "youtube.com." + forward-tls-upstream: yes + forward-addr: 2001:4860:4860::8844@853#dns.google + forward-addr: 2001:4860:4860::8888@853#dns.google + forward-addr: 8.8.4.4@853#dns.google + forward-addr: 8.8.8.8@853#dns.google + +forward-zone: + name: "youtube-nocookie.com." + forward-tls-upstream: yes + forward-addr: 2001:4860:4860::8844@853#dns.google + forward-addr: 2001:4860:4860::8888@853#dns.google + forward-addr: 8.8.4.4@853#dns.google + forward-addr: 8.8.8.8@853#dns.google + +forward-zone: + name: "youtu.be." + forward-tls-upstream: yes + forward-addr: 2001:4860:4860::8844@853#dns.google + forward-addr: 2001:4860:4860::8888@853#dns.google + forward-addr: 8.8.4.4@853#dns.google + forward-addr: 8.8.8.8@853#dns.google + +forward-zone: + name: "googlevideo.com." + forward-tls-upstream: yes + forward-addr: 2001:4860:4860::8844@853#dns.google + forward-addr: 2001:4860:4860::8888@853#dns.google + forward-addr: 8.8.4.4@853#dns.google + forward-addr: 8.8.8.8@853#dns.google + +forward-zone: + name: "ytimg.com." + forward-tls-upstream: yes + forward-addr: 2001:4860:4860::8844@853#dns.google + forward-addr: 2001:4860:4860::8888@853#dns.google + forward-addr: 8.8.4.4@853#dns.google + forward-addr: 8.8.8.8@853#dns.google + +# forward-zone: +# name: "googleusercontent.com." +# forward-tls-upstream: yes +# forward-addr: 2001:4860:4860::8844@853#dns.google +# forward-addr: 2001:4860:4860::8888@853#dns.google +# forward-addr: 8.8.4.4@853#dns.google +# forward-addr: 8.8.8.8@853#dns.google + +forward-zone: + name: "gstatic.com." + forward-tls-upstream: yes + forward-addr: 2001:4860:4860::8844@853#dns.google + forward-addr: 2001:4860:4860::8888@853#dns.google + forward-addr: 8.8.4.4@853#dns.google + forward-addr: 8.8.8.8@853#dns.google + +forward-zone: + name: "cloudflare.com." + forward-addr: 2606:4700:4700::1112@853#security.cloudflare-dns.com + forward-addr: 2606:4700:4700::1002@853#security.cloudflare-dns.com + forward-addr: 1.1.1.2@853#security.cloudflare-dns.com + forward-addr: 1.0.0.2@853#security.cloudflare-dns.com + +forward-zone: + name: "cloudflare-dns.com." + forward-addr: 2606:4700:4700::1112@853#security.cloudflare-dns.com + forward-addr: 2606:4700:4700::1002@853#security.cloudflare-dns.com + forward-addr: 1.1.1.2@853#security.cloudflare-dns.com + forward-addr: 1.0.0.2@853#security.cloudflare-dns.com + +forward-zone: + name: "one.one." + forward-addr: 2606:4700:4700::1112@853#security.cloudflare-dns.com + forward-addr: 2606:4700:4700::1002@853#security.cloudflare-dns.com + forward-addr: 1.1.1.2@853#security.cloudflare-dns.com + forward-addr: 1.0.0.2@853#security.cloudflare-dns.com + +# vim: filetype=unbound.conf