Update Unbound

This commit is contained in:
OSPanel 2024-03-12 15:30:17 +03:00
parent 5d0b1630d6
commit 7ec49a382e
14 changed files with 170 additions and 170 deletions

View file

@ -1,3 +1,3 @@
version https://git-lfs.github.com/spec/v1 version https://git-lfs.github.com/spec/v1
oid sha256:152103c8e091ff24a7a6424a0233c7c7f8496193ca69dc4d4e5f5159f09589e3 oid sha256:834026fa05fc35f1358d450539030a2724b5de36726355e8988b4d73c7072c64
size 52405 size 52405

View file

@ -9,8 +9,8 @@
; on server FTP.INTERNIC.NET ; on server FTP.INTERNIC.NET
; -OR- RS.INTERNIC.NET ; -OR- RS.INTERNIC.NET
; ;
; last update: January 31, 2022 ; last update: March 11, 2024
; related version of root zone: 2022013101 ; related version of root zone: 2024031103
; ;
; FORMERLY NS.INTERNIC.NET ; FORMERLY NS.INTERNIC.NET
; ;
@ -21,8 +21,8 @@ A.ROOT-SERVERS.NET. 3600000 AAAA 2001:503:ba3e::2:30
; FORMERLY NS1.ISI.EDU ; FORMERLY NS1.ISI.EDU
; ;
. 3600000 NS B.ROOT-SERVERS.NET. . 3600000 NS B.ROOT-SERVERS.NET.
B.ROOT-SERVERS.NET. 3600000 A 199.9.14.201 B.ROOT-SERVERS.NET. 3600000 A 170.247.170.2
B.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:200::b B.ROOT-SERVERS.NET. 3600000 AAAA 2801:1b8:10::b
; ;
; FORMERLY C.PSI.NET ; FORMERLY C.PSI.NET
; ;

View file

@ -1,9 +1,9 @@
; autotrust trust anchor file ; autotrust trust anchor file
;;id: . 1 ;;id: . 1
;;last_queried: 1679019861 ;;Fri Mar 17 05:24:21 2023 ;;last_queried: 1710246319 ;;Tue Mar 12 15:25:19 2024
;;last_success: 1679019861 ;;Fri Mar 17 05:24:21 2023 ;;last_success: 1710246319 ;;Tue Mar 12 15:25:19 2024
;;next_probe_time: 1679060499 ;;Fri Mar 17 16:41:39 2023 ;;next_probe_time: 1710249806 ;;Tue Mar 12 16:23:26 2024
;;query_failed: 0 ;;query_failed: 0
;;query_interval: 43200 ;;query_interval: 3600
;;retry_time: 8640 ;;retry_time: 3600
. 86400 IN DNSKEY 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ;{id = 20326 (ksk), size = 2048b} ;;state=2 [ VALID ] ;;count=0 ;;lastchange=1679019837 ;;Fri Mar 17 05:23:57 2023 . 1119 IN DNSKEY 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ;{id = 20326 (ksk), size = 2048b} ;;state=2 [ VALID ] ;;count=0 ;;lastchange=1710246317 ;;Tue Mar 12 15:25:17 2024

View file

@ -1,31 +1,31 @@
Usage: unbound-anchor [opts] Usage: unbound-anchor [opts]
Setup or update root anchor. Most options have defaults. Setup or update root anchor. Most options have defaults.
Run this program before you start the validator. Run this program before you start the validator.
The anchor and cert have default builtin content The anchor and cert have default builtin content
if the file does not exist or is empty. if the file does not exist or is empty.
-a file root key file, default C:\Program Files\Unbound\root.key -a file root key file, default C:\Program Files\Unbound\root.key
The key is input and output for this tool. The key is input and output for this tool.
-c file cert file, default C:\Program Files\Unbound\icannbundle.pem -c file cert file, default C:\Program Files\Unbound\icannbundle.pem
-l list builtin key and cert on stdout -l list builtin key and cert on stdout
-u name server in https url, default data.iana.org -u name server in https url, default data.iana.org
-S do not use SNI for the https connection -S do not use SNI for the https connection
-x path pathname to xml in url, default root-anchors/root-anchors.xml -x path pathname to xml in url, default root-anchors/root-anchors.xml
-s path pathname to p7s in url, default root-anchors/root-anchors.p7s -s path pathname to p7s in url, default root-anchors/root-anchors.p7s
-n name signer's subject emailAddress, default dnssec@iana.org -n name signer's subject emailAddress, default dnssec@iana.org
-b address source address to bind to -b address source address to bind to
-4 work using IPv4 only -4 work using IPv4 only
-6 work using IPv6 only -6 work using IPv6 only
-f resolv.conf use given resolv.conf -f resolv.conf use given resolv.conf
-r root.hints use given root.hints -r root.hints use given root.hints
builtin root hints are used by default builtin root hints are used by default
-R fallback from -f to root query on error -R fallback from -f to root query on error
-v more verbose -v more verbose
-C conf debug, read config -C conf debug, read config
-P port use port for https connect, default 443 -P port use port for https connect, default 443
-F debug, force update with cert -F debug, force update with cert
-h show this usage help -h show this usage help
Version 1.19.0 Version 1.19.2
BSD licensed, see LICENSE in source package for details. BSD licensed, see LICENSE in source package for details.
Report bugs to unbound-bugs@nlnetlabs.nl or https://github.com/NLnetLabs/unbound/issues Report bugs to unbound-bugs@nlnetlabs.nl or https://github.com/NLnetLabs/unbound/issues

View file

@ -1,9 +1,9 @@
Usage: unbound-checkconf [file] Usage: unbound-checkconf [file]
Checks unbound configuration file for errors. Checks unbound configuration file for errors.
file if omitted C:\Program Files\Unbound\service.conf is used. file if omitted C:\Program Files\Unbound\service.conf is used.
-o option print value of option to stdout. -o option print value of option to stdout.
-f output full pathname with chroot applied, eg. with -o pidfile. -f output full pathname with chroot applied, eg. with -o pidfile.
-h show this usage help. -h show this usage help.
Version 1.19.0 Version 1.19.2
BSD licensed, see LICENSE in source package for details. BSD licensed, see LICENSE in source package for details.
Report bugs to unbound-bugs@nlnetlabs.nl or https://github.com/NLnetLabs/unbound/issues Report bugs to unbound-bugs@nlnetlabs.nl or https://github.com/NLnetLabs/unbound/issues

View file

@ -1,87 +1,87 @@
Usage: unbound-control [options] command Usage: unbound-control [options] command
Remote control utility for unbound server. Remote control utility for unbound server.
Options: Options:
-c file config file, default is C:\Program Files\Unbound\service.conf -c file config file, default is C:\Program Files\Unbound\service.conf
-s ip[@port] server address, if omitted config is used. -s ip[@port] server address, if omitted config is used.
-q quiet (don't print anything if it works ok). -q quiet (don't print anything if it works ok).
-h show this usage help. -h show this usage help.
Commands: Commands:
start start server; runs unbound(8) start start server; runs unbound(8)
stop stops the server stop stops the server
reload reloads the server reload reloads the server
(this flushes data, stats, requestlist) (this flushes data, stats, requestlist)
reload_keep_cache reloads the server but tries to reload_keep_cache reloads the server but tries to
keep the RRset and message cache keep the RRset and message cache
if (re)configuration allows for it. if (re)configuration allows for it.
That means the caches sizes and That means the caches sizes and
the number of threads must not the number of threads must not
change between reloads. change between reloads.
stats print statistics stats print statistics
stats_noreset peek at statistics stats_noreset peek at statistics
status display status of server status display status of server
verbosity <number> change logging detail verbosity <number> change logging detail
log_reopen close and open the logfile log_reopen close and open the logfile
local_zone <name> <type> add new local zone local_zone <name> <type> add new local zone
local_zone_remove <name> remove local zone and its contents local_zone_remove <name> remove local zone and its contents
local_data <RR data...> add local data, for example local_data <RR data...> add local data, for example
local_data www.example.com A 192.0.2.1 local_data www.example.com A 192.0.2.1
local_data_remove <name> remove local RR data from name local_data_remove <name> remove local RR data from name
local_zones, local_zones_remove, local_datas, local_datas_remove local_zones, local_zones_remove, local_datas, local_datas_remove
same, but read list from stdin same, but read list from stdin
(one entry per line). (one entry per line).
dump_cache print cache to stdout dump_cache print cache to stdout
load_cache load cache from stdin load_cache load cache from stdin
lookup <name> print nameservers for name lookup <name> print nameservers for name
flush <name> flushes common types for name from cache flush <name> flushes common types for name from cache
types: A, AAAA, MX, PTR, NS, types: A, AAAA, MX, PTR, NS,
SOA, CNAME, DNAME, SRV, NAPTR SOA, CNAME, DNAME, SRV, NAPTR
flush_type <name> <type> flush name, type from cache flush_type <name> <type> flush name, type from cache
flush_zone <name> flush everything at or under name flush_zone <name> flush everything at or under name
from rr and dnssec caches from rr and dnssec caches
flush_bogus flush all bogus data flush_bogus flush all bogus data
flush_negative flush all negative data flush_negative flush all negative data
flush_stats flush statistics, make zero flush_stats flush statistics, make zero
flush_requestlist drop queries that are worked on flush_requestlist drop queries that are worked on
dump_requestlist show what is worked on by first thread dump_requestlist show what is worked on by first thread
flush_infra [all | ip] remove ping, edns for one IP or all flush_infra [all | ip] remove ping, edns for one IP or all
dump_infra show ping and edns entries dump_infra show ping and edns entries
set_option opt: val set option to value, no reload set_option opt: val set option to value, no reload
get_option opt get option value get_option opt get option value
list_stubs list stub-zones and root hints in use list_stubs list stub-zones and root hints in use
list_forwards list forward-zones in use list_forwards list forward-zones in use
list_insecure list domain-insecure zones list_insecure list domain-insecure zones
list_local_zones list local-zones in use list_local_zones list local-zones in use
list_local_data list local-data RRs in use list_local_data list local-data RRs in use
insecure_add zone add domain-insecure zone insecure_add zone add domain-insecure zone
insecure_remove zone remove domain-insecure zone insecure_remove zone remove domain-insecure zone
forward_add [+i] zone addr.. add forward-zone with servers forward_add [+i] zone addr.. add forward-zone with servers
forward_remove [+i] zone remove forward zone forward_remove [+i] zone remove forward zone
stub_add [+ip] zone addr.. add stub-zone with servers stub_add [+ip] zone addr.. add stub-zone with servers
stub_remove [+i] zone remove stub zone stub_remove [+i] zone remove stub zone
+i also do dnssec insecure point +i also do dnssec insecure point
+p set stub to use priming +p set stub to use priming
forward [off | addr ...] without arg show forward setup forward [off | addr ...] without arg show forward setup
or off to turn off root forwarding or off to turn off root forwarding
or give list of ip addresses or give list of ip addresses
ratelimit_list [+a] list ratelimited domains ratelimit_list [+a] list ratelimited domains
ip_ratelimit_list [+a] list ratelimited ip addresses ip_ratelimit_list [+a] list ratelimited ip addresses
+a list all, also not ratelimited +a list all, also not ratelimited
list_auth_zones list auth zones (includes RPZ zones) list_auth_zones list auth zones (includes RPZ zones)
auth_zone_reload zone reload auth zone (or RPZ zone) from zonefile auth_zone_reload zone reload auth zone (or RPZ zone) from zonefile
auth_zone_transfer zone transfer auth zone (or RPZ zone) from master auth_zone_transfer zone transfer auth zone (or RPZ zone) from master
view_list_local_zones view list local-zones in view view_list_local_zones view list local-zones in view
view_list_local_data view list local-data RRs in view view_list_local_data view list local-data RRs in view
view_local_zone view name type add local-zone in view view_local_zone view name type add local-zone in view
view_local_zone_remove view name remove local-zone in view view_local_zone_remove view name remove local-zone in view
view_local_data view RR... add local-data in view view_local_data view RR... add local-data in view
view_local_datas view add list of local-data to view view_local_datas view add list of local-data to view
one entry per line read from stdin one entry per line read from stdin
view_local_data_remove view name remove local-data in view view_local_data_remove view name remove local-data in view
view_local_datas_remove view remove list of local-data from view view_local_datas_remove view remove list of local-data from view
one entry per line read from stdin one entry per line read from stdin
rpz_enable zone Enable the RPZ zone if it had previously rpz_enable zone Enable the RPZ zone if it had previously
been disabled been disabled
rpz_disable zone Disable the RPZ zone rpz_disable zone Disable the RPZ zone
Version 1.19.0 Version 1.19.2
BSD licensed, see LICENSE in source package for details. BSD licensed, see LICENSE in source package for details.
Report bugs to unbound-bugs@nlnetlabs.nl or https://github.com/NLnetLabs/unbound/issues Report bugs to unbound-bugs@nlnetlabs.nl or https://github.com/NLnetLabs/unbound/issues

View file

@ -1,27 +1,27 @@
Usage: unbound-host [-C configfile] [-vdhr46] [-c class] [-t type] Usage: unbound-host [-C configfile] [-vdhr46] [-c class] [-t type]
[-y key] [-f keyfile] [-F namedkeyfile] hostname [-y key] [-f keyfile] [-F namedkeyfile] hostname
Queries the DNS for information. Queries the DNS for information.
The hostname is looked up for IP4, IP6 and mail. The hostname is looked up for IP4, IP6 and mail.
If an ip-address is given a reverse lookup is done. If an ip-address is given a reverse lookup is done.
Use the -v option to see DNSSEC security information. Use the -v option to see DNSSEC security information.
-t type what type to look for. -t type what type to look for.
-c class what class to look for, if not class IN. -c class what class to look for, if not class IN.
-y 'keystring' specify trust anchor, DS or DNSKEY, like -y 'keystring' specify trust anchor, DS or DNSKEY, like
-y 'example.com DS 31560 5 1 1CFED8478...' -y 'example.com DS 31560 5 1 1CFED8478...'
-D DNSSEC enable with default root anchor -D DNSSEC enable with default root anchor
from C:\Program Files\Unbound\root.key from C:\Program Files\Unbound\root.key
-f keyfile read trust anchors from file, with lines as -y. -f keyfile read trust anchors from file, with lines as -y.
-F keyfile read named.conf-style trust anchors. -F keyfile read named.conf-style trust anchors.
-C config use the specified unbound.conf (none read by default) -C config use the specified unbound.conf (none read by default)
pass as first argument if you want to override some pass as first argument if you want to override some
options with further arguments options with further arguments
-r read forwarder information from /etc/resolv.conf -r read forwarder information from /etc/resolv.conf
breaks validation if the forwarder does not do DNSSEC. breaks validation if the forwarder does not do DNSSEC.
-v be more verbose, shows nodata and security. -v be more verbose, shows nodata and security.
-d debug, traces the action, -d -d shows more. -d debug, traces the action, -d -d shows more.
-4 use ipv4 network, avoid ipv6. -4 use ipv4 network, avoid ipv6.
-6 use ipv6 network, avoid ipv4. -6 use ipv6 network, avoid ipv4.
-h show this usage help. -h show this usage help.
Version 1.19.0 Version 1.19.2
BSD licensed, see LICENSE in source package for details. BSD licensed, see LICENSE in source package for details.
Report bugs to unbound-bugs@nlnetlabs.nl or https://github.com/NLnetLabs/unbound/issues Report bugs to unbound-bugs@nlnetlabs.nl or https://github.com/NLnetLabs/unbound/issues

View file

@ -1,16 +1,16 @@
usage: unbound [options] usage: unbound [options]
start unbound daemon DNS resolver. start unbound daemon DNS resolver.
-h this help. -h this help.
-c file config file to read instead of C:\Program Files\Unbound\service.conf -c file config file to read instead of C:\Program Files\Unbound\service.conf
file format is described in unbound.conf(5). file format is described in unbound.conf(5).
-d do not fork into the background. -d do not fork into the background.
-p do not create a pidfile. -p do not create a pidfile.
-v verbose (more times to increase verbosity). -v verbose (more times to increase verbosity).
-V show version number and build options. -V show version number and build options.
-w opt windows option: -w opt windows option:
install, remove - manage the services entry install, remove - manage the services entry
service - used to start from services control panel service - used to start from services control panel
Version 1.19.0 Version 1.19.2
BSD licensed, see LICENSE in source package for details. BSD licensed, see LICENSE in source package for details.
Report bugs to unbound-bugs@nlnetlabs.nl or https://github.com/NLnetLabs/unbound/issues Report bugs to unbound-bugs@nlnetlabs.nl or https://github.com/NLnetLabs/unbound/issues

View file

@ -11,7 +11,7 @@ license = https://github.com/NLnetLabs/unbound/blob/master/LICENSE
license_type = BSD License 2.0 license_type = BSD License 2.0
min_windows_ver = 6.1.7601 min_windows_ver = 6.1.7601
timestamp = 1651770000 timestamp = 1651770000
version = 1.19.0 version = 1.19.2
[docs] [docs]

View file

@ -1,3 +1,3 @@
version https://git-lfs.github.com/spec/v1 version https://git-lfs.github.com/spec/v1
oid sha256:d8a31a27c2747d5ab81ddb2e182bb6943fc06d7e51079a09b3b35e87a3b566dc oid sha256:5398786d7b9048744a32cb25b13112867c2d239e6dbcbe7e6c04b7ab23eacbf8
size 9215770 size 9244745

View file

@ -1,3 +1,3 @@
version https://git-lfs.github.com/spec/v1 version https://git-lfs.github.com/spec/v1
oid sha256:d4a46d74b46d3bb4d4c612ec310b53ec70c30faa96a5a0711a7143c082028b6e oid sha256:105a57bee2aea85aa65ca0866e43e58a5b50d92b5c59bdce915504da18580c73
size 8434333 size 8463820

View file

@ -1,3 +1,3 @@
version https://git-lfs.github.com/spec/v1 version https://git-lfs.github.com/spec/v1
oid sha256:e37bb7c22d48051a5cde20819991752de3df6d0c589aad6265b4ea2725fef772 oid sha256:790d5a34f1f5e2be04166fe5de192e7fcfc4b60c041165e163489ff28ac36b54
size 8416498 size 8444449

View file

@ -1,3 +1,3 @@
version https://git-lfs.github.com/spec/v1 version https://git-lfs.github.com/spec/v1
oid sha256:8c25ce4d601872921a9388560eeda8c1975f2f500aac5e13f61d3bcf184f7483 oid sha256:d944a245be17b8b2b1175dd23237b662f55b7f2ce5024589c0a8e8509da4bd42
size 8606132 size 8634595

View file

@ -1,3 +1,3 @@
version https://git-lfs.github.com/spec/v1 version https://git-lfs.github.com/spec/v1
oid sha256:faf5f6cd8f79509c34f02ae2fb5e3ee48834f4c5f729aea5bc2e10a949d9fe33 oid sha256:69af1f5744bbcb36d49afd980d44212fc960d291f22632c68211f8674dfee153
size 9123737 size 9152712