Update Unbound

This commit is contained in:
OSPanel 2024-03-12 15:30:17 +03:00
parent 5d0b1630d6
commit 7ec49a382e
14 changed files with 170 additions and 170 deletions

View file

@ -1,3 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:152103c8e091ff24a7a6424a0233c7c7f8496193ca69dc4d4e5f5159f09589e3
oid sha256:834026fa05fc35f1358d450539030a2724b5de36726355e8988b4d73c7072c64
size 52405

View file

@ -9,8 +9,8 @@
; on server FTP.INTERNIC.NET
; -OR- RS.INTERNIC.NET
;
; last update: January 31, 2022
; related version of root zone: 2022013101
; last update: March 11, 2024
; related version of root zone: 2024031103
;
; FORMERLY NS.INTERNIC.NET
;
@ -21,8 +21,8 @@ A.ROOT-SERVERS.NET. 3600000 AAAA 2001:503:ba3e::2:30
; FORMERLY NS1.ISI.EDU
;
. 3600000 NS B.ROOT-SERVERS.NET.
B.ROOT-SERVERS.NET. 3600000 A 199.9.14.201
B.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:200::b
B.ROOT-SERVERS.NET. 3600000 A 170.247.170.2
B.ROOT-SERVERS.NET. 3600000 AAAA 2801:1b8:10::b
;
; FORMERLY C.PSI.NET
;

View file

@ -1,9 +1,9 @@
; autotrust trust anchor file
;;id: . 1
;;last_queried: 1679019861 ;;Fri Mar 17 05:24:21 2023
;;last_success: 1679019861 ;;Fri Mar 17 05:24:21 2023
;;next_probe_time: 1679060499 ;;Fri Mar 17 16:41:39 2023
;;last_queried: 1710246319 ;;Tue Mar 12 15:25:19 2024
;;last_success: 1710246319 ;;Tue Mar 12 15:25:19 2024
;;next_probe_time: 1710249806 ;;Tue Mar 12 16:23:26 2024
;;query_failed: 0
;;query_interval: 43200
;;retry_time: 8640
. 86400 IN DNSKEY 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ;{id = 20326 (ksk), size = 2048b} ;;state=2 [ VALID ] ;;count=0 ;;lastchange=1679019837 ;;Fri Mar 17 05:23:57 2023
;;query_interval: 3600
;;retry_time: 3600
. 1119 IN DNSKEY 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ;{id = 20326 (ksk), size = 2048b} ;;state=2 [ VALID ] ;;count=0 ;;lastchange=1710246317 ;;Tue Mar 12 15:25:17 2024

View file

@ -1,31 +1,31 @@
Usage: unbound-anchor [opts]
Setup or update root anchor. Most options have defaults.
Run this program before you start the validator.
Usage: unbound-anchor [opts]
Setup or update root anchor. Most options have defaults.
Run this program before you start the validator.
The anchor and cert have default builtin content
if the file does not exist or is empty.
The anchor and cert have default builtin content
if the file does not exist or is empty.
-a file root key file, default C:\Program Files\Unbound\root.key
The key is input and output for this tool.
-c file cert file, default C:\Program Files\Unbound\icannbundle.pem
-l list builtin key and cert on stdout
-u name server in https url, default data.iana.org
-S do not use SNI for the https connection
-x path pathname to xml in url, default root-anchors/root-anchors.xml
-s path pathname to p7s in url, default root-anchors/root-anchors.p7s
-n name signer's subject emailAddress, default dnssec@iana.org
-b address source address to bind to
-4 work using IPv4 only
-6 work using IPv6 only
-f resolv.conf use given resolv.conf
-r root.hints use given root.hints
builtin root hints are used by default
-R fallback from -f to root query on error
-v more verbose
-C conf debug, read config
-P port use port for https connect, default 443
-F debug, force update with cert
-h show this usage help
Version 1.19.0
-a file root key file, default C:\Program Files\Unbound\root.key
The key is input and output for this tool.
-c file cert file, default C:\Program Files\Unbound\icannbundle.pem
-l list builtin key and cert on stdout
-u name server in https url, default data.iana.org
-S do not use SNI for the https connection
-x path pathname to xml in url, default root-anchors/root-anchors.xml
-s path pathname to p7s in url, default root-anchors/root-anchors.p7s
-n name signer's subject emailAddress, default dnssec@iana.org
-b address source address to bind to
-4 work using IPv4 only
-6 work using IPv6 only
-f resolv.conf use given resolv.conf
-r root.hints use given root.hints
builtin root hints are used by default
-R fallback from -f to root query on error
-v more verbose
-C conf debug, read config
-P port use port for https connect, default 443
-F debug, force update with cert
-h show this usage help
Version 1.19.2
BSD licensed, see LICENSE in source package for details.
Report bugs to unbound-bugs@nlnetlabs.nl or https://github.com/NLnetLabs/unbound/issues

View file

@ -1,9 +1,9 @@
Usage: unbound-checkconf [file]
Checks unbound configuration file for errors.
file if omitted C:\Program Files\Unbound\service.conf is used.
-o option print value of option to stdout.
-f output full pathname with chroot applied, eg. with -o pidfile.
-h show this usage help.
Version 1.19.0
Usage: unbound-checkconf [file]
Checks unbound configuration file for errors.
file if omitted C:\Program Files\Unbound\service.conf is used.
-o option print value of option to stdout.
-f output full pathname with chroot applied, eg. with -o pidfile.
-h show this usage help.
Version 1.19.2
BSD licensed, see LICENSE in source package for details.
Report bugs to unbound-bugs@nlnetlabs.nl or https://github.com/NLnetLabs/unbound/issues

View file

@ -1,87 +1,87 @@
Usage: unbound-control [options] command
Remote control utility for unbound server.
Usage: unbound-control [options] command
Remote control utility for unbound server.
Options:
-c file config file, default is C:\Program Files\Unbound\service.conf
-s ip[@port] server address, if omitted config is used.
-q quiet (don't print anything if it works ok).
-h show this usage help.
-c file config file, default is C:\Program Files\Unbound\service.conf
-s ip[@port] server address, if omitted config is used.
-q quiet (don't print anything if it works ok).
-h show this usage help.
Commands:
start start server; runs unbound(8)
stop stops the server
reload reloads the server
(this flushes data, stats, requestlist)
reload_keep_cache reloads the server but tries to
keep the RRset and message cache
if (re)configuration allows for it.
That means the caches sizes and
the number of threads must not
change between reloads.
stats print statistics
stats_noreset peek at statistics
status display status of server
verbosity <number> change logging detail
log_reopen close and open the logfile
local_zone <name> <type> add new local zone
local_zone_remove <name> remove local zone and its contents
local_data <RR data...> add local data, for example
local_data www.example.com A 192.0.2.1
local_data_remove <name> remove local RR data from name
start start server; runs unbound(8)
stop stops the server
reload reloads the server
(this flushes data, stats, requestlist)
reload_keep_cache reloads the server but tries to
keep the RRset and message cache
if (re)configuration allows for it.
That means the caches sizes and
the number of threads must not
change between reloads.
stats print statistics
stats_noreset peek at statistics
status display status of server
verbosity <number> change logging detail
log_reopen close and open the logfile
local_zone <name> <type> add new local zone
local_zone_remove <name> remove local zone and its contents
local_data <RR data...> add local data, for example
local_data www.example.com A 192.0.2.1
local_data_remove <name> remove local RR data from name
local_zones, local_zones_remove, local_datas, local_datas_remove
same, but read list from stdin
(one entry per line).
dump_cache print cache to stdout
load_cache load cache from stdin
lookup <name> print nameservers for name
flush <name> flushes common types for name from cache
types: A, AAAA, MX, PTR, NS,
SOA, CNAME, DNAME, SRV, NAPTR
flush_type <name> <type> flush name, type from cache
flush_zone <name> flush everything at or under name
from rr and dnssec caches
flush_bogus flush all bogus data
flush_negative flush all negative data
flush_stats flush statistics, make zero
flush_requestlist drop queries that are worked on
dump_requestlist show what is worked on by first thread
flush_infra [all | ip] remove ping, edns for one IP or all
dump_infra show ping and edns entries
set_option opt: val set option to value, no reload
get_option opt get option value
list_stubs list stub-zones and root hints in use
list_forwards list forward-zones in use
list_insecure list domain-insecure zones
list_local_zones list local-zones in use
list_local_data list local-data RRs in use
insecure_add zone add domain-insecure zone
insecure_remove zone remove domain-insecure zone
forward_add [+i] zone addr.. add forward-zone with servers
forward_remove [+i] zone remove forward zone
stub_add [+ip] zone addr.. add stub-zone with servers
stub_remove [+i] zone remove stub zone
+i also do dnssec insecure point
+p set stub to use priming
forward [off | addr ...] without arg show forward setup
or off to turn off root forwarding
or give list of ip addresses
ratelimit_list [+a] list ratelimited domains
ip_ratelimit_list [+a] list ratelimited ip addresses
+a list all, also not ratelimited
list_auth_zones list auth zones (includes RPZ zones)
auth_zone_reload zone reload auth zone (or RPZ zone) from zonefile
auth_zone_transfer zone transfer auth zone (or RPZ zone) from master
view_list_local_zones view list local-zones in view
view_list_local_data view list local-data RRs in view
view_local_zone view name type add local-zone in view
view_local_zone_remove view name remove local-zone in view
view_local_data view RR... add local-data in view
view_local_datas view add list of local-data to view
one entry per line read from stdin
view_local_data_remove view name remove local-data in view
view_local_datas_remove view remove list of local-data from view
one entry per line read from stdin
rpz_enable zone Enable the RPZ zone if it had previously
been disabled
rpz_disable zone Disable the RPZ zone
Version 1.19.0
same, but read list from stdin
(one entry per line).
dump_cache print cache to stdout
load_cache load cache from stdin
lookup <name> print nameservers for name
flush <name> flushes common types for name from cache
types: A, AAAA, MX, PTR, NS,
SOA, CNAME, DNAME, SRV, NAPTR
flush_type <name> <type> flush name, type from cache
flush_zone <name> flush everything at or under name
from rr and dnssec caches
flush_bogus flush all bogus data
flush_negative flush all negative data
flush_stats flush statistics, make zero
flush_requestlist drop queries that are worked on
dump_requestlist show what is worked on by first thread
flush_infra [all | ip] remove ping, edns for one IP or all
dump_infra show ping and edns entries
set_option opt: val set option to value, no reload
get_option opt get option value
list_stubs list stub-zones and root hints in use
list_forwards list forward-zones in use
list_insecure list domain-insecure zones
list_local_zones list local-zones in use
list_local_data list local-data RRs in use
insecure_add zone add domain-insecure zone
insecure_remove zone remove domain-insecure zone
forward_add [+i] zone addr.. add forward-zone with servers
forward_remove [+i] zone remove forward zone
stub_add [+ip] zone addr.. add stub-zone with servers
stub_remove [+i] zone remove stub zone
+i also do dnssec insecure point
+p set stub to use priming
forward [off | addr ...] without arg show forward setup
or off to turn off root forwarding
or give list of ip addresses
ratelimit_list [+a] list ratelimited domains
ip_ratelimit_list [+a] list ratelimited ip addresses
+a list all, also not ratelimited
list_auth_zones list auth zones (includes RPZ zones)
auth_zone_reload zone reload auth zone (or RPZ zone) from zonefile
auth_zone_transfer zone transfer auth zone (or RPZ zone) from master
view_list_local_zones view list local-zones in view
view_list_local_data view list local-data RRs in view
view_local_zone view name type add local-zone in view
view_local_zone_remove view name remove local-zone in view
view_local_data view RR... add local-data in view
view_local_datas view add list of local-data to view
one entry per line read from stdin
view_local_data_remove view name remove local-data in view
view_local_datas_remove view remove list of local-data from view
one entry per line read from stdin
rpz_enable zone Enable the RPZ zone if it had previously
been disabled
rpz_disable zone Disable the RPZ zone
Version 1.19.2
BSD licensed, see LICENSE in source package for details.
Report bugs to unbound-bugs@nlnetlabs.nl or https://github.com/NLnetLabs/unbound/issues

View file

@ -1,27 +1,27 @@
Usage: unbound-host [-C configfile] [-vdhr46] [-c class] [-t type]
Usage: unbound-host [-C configfile] [-vdhr46] [-c class] [-t type]
[-y key] [-f keyfile] [-F namedkeyfile] hostname
Queries the DNS for information.
The hostname is looked up for IP4, IP6 and mail.
If an ip-address is given a reverse lookup is done.
Use the -v option to see DNSSEC security information.
-t type what type to look for.
-c class what class to look for, if not class IN.
-y 'keystring' specify trust anchor, DS or DNSKEY, like
-y 'example.com DS 31560 5 1 1CFED8478...'
-D DNSSEC enable with default root anchor
from C:\Program Files\Unbound\root.key
-f keyfile read trust anchors from file, with lines as -y.
-F keyfile read named.conf-style trust anchors.
-C config use the specified unbound.conf (none read by default)
pass as first argument if you want to override some
options with further arguments
-r read forwarder information from /etc/resolv.conf
breaks validation if the forwarder does not do DNSSEC.
-v be more verbose, shows nodata and security.
-d debug, traces the action, -d -d shows more.
-4 use ipv4 network, avoid ipv6.
-6 use ipv6 network, avoid ipv4.
-h show this usage help.
Version 1.19.0
-t type what type to look for.
-c class what class to look for, if not class IN.
-y 'keystring' specify trust anchor, DS or DNSKEY, like
-y 'example.com DS 31560 5 1 1CFED8478...'
-D DNSSEC enable with default root anchor
from C:\Program Files\Unbound\root.key
-f keyfile read trust anchors from file, with lines as -y.
-F keyfile read named.conf-style trust anchors.
-C config use the specified unbound.conf (none read by default)
pass as first argument if you want to override some
options with further arguments
-r read forwarder information from /etc/resolv.conf
breaks validation if the forwarder does not do DNSSEC.
-v be more verbose, shows nodata and security.
-d debug, traces the action, -d -d shows more.
-4 use ipv4 network, avoid ipv6.
-6 use ipv6 network, avoid ipv4.
-h show this usage help.
Version 1.19.2
BSD licensed, see LICENSE in source package for details.
Report bugs to unbound-bugs@nlnetlabs.nl or https://github.com/NLnetLabs/unbound/issues

View file

@ -1,16 +1,16 @@
usage: unbound [options]
start unbound daemon DNS resolver.
-h this help.
-c file config file to read instead of C:\Program Files\Unbound\service.conf
file format is described in unbound.conf(5).
-d do not fork into the background.
-p do not create a pidfile.
-v verbose (more times to increase verbosity).
-V show version number and build options.
-w opt windows option:
install, remove - manage the services entry
service - used to start from services control panel
start unbound daemon DNS resolver.
-h this help.
-c file config file to read instead of C:\Program Files\Unbound\service.conf
file format is described in unbound.conf(5).
-d do not fork into the background.
-p do not create a pidfile.
-v verbose (more times to increase verbosity).
-V show version number and build options.
-w opt windows option:
install, remove - manage the services entry
service - used to start from services control panel
Version 1.19.0
Version 1.19.2
BSD licensed, see LICENSE in source package for details.
Report bugs to unbound-bugs@nlnetlabs.nl or https://github.com/NLnetLabs/unbound/issues

View file

@ -11,7 +11,7 @@ license = https://github.com/NLnetLabs/unbound/blob/master/LICENSE
license_type = BSD License 2.0
min_windows_ver = 6.1.7601
timestamp = 1651770000
version = 1.19.0
version = 1.19.2
[docs]

View file

@ -1,3 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:d8a31a27c2747d5ab81ddb2e182bb6943fc06d7e51079a09b3b35e87a3b566dc
size 9215770
oid sha256:5398786d7b9048744a32cb25b13112867c2d239e6dbcbe7e6c04b7ab23eacbf8
size 9244745

View file

@ -1,3 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:d4a46d74b46d3bb4d4c612ec310b53ec70c30faa96a5a0711a7143c082028b6e
size 8434333
oid sha256:105a57bee2aea85aa65ca0866e43e58a5b50d92b5c59bdce915504da18580c73
size 8463820

View file

@ -1,3 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:e37bb7c22d48051a5cde20819991752de3df6d0c589aad6265b4ea2725fef772
size 8416498
oid sha256:790d5a34f1f5e2be04166fe5de192e7fcfc4b60c041165e163489ff28ac36b54
size 8444449

View file

@ -1,3 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:8c25ce4d601872921a9388560eeda8c1975f2f500aac5e13f61d3bcf184f7483
size 8606132
oid sha256:d944a245be17b8b2b1175dd23237b662f55b7f2ce5024589c0a8e8509da4bd42
size 8634595

View file

@ -1,3 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:faf5f6cd8f79509c34f02ae2fb5e3ee48834f4c5f729aea5bc2e10a949d9fe33
size 9123737
oid sha256:69af1f5744bbcb36d49afd980d44212fc960d291f22632c68211f8674dfee153
size 9152712