Arch Linux

rgzfxf6bhu

Member

Registered: 2015-10-30

Posts: 101

[SOLVED] dnscrypt and unbound cannot communicate with eachother

I want to use unbound with dnscrypt. As a very basic setup I just used following unbound.conf.

cat /etc/unbound/unbound.conf
--------------
server:
  trust-anchor-file: /etc/unbound/trusted-key.key
  forward-zone:
    name: "."
    forward-addr: 127.0.0.1@5353

dnscrypt seems to be setup correctly on port 5353 as I get:

drill www.google.com @127.0.0.1 -p 5353
--------------
;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 48069

But when I try:

drill www.google.com @127.0.0.1 -p 53
--------------
;; ->>HEADER<<- opcode: QUERY, rcode: SERVFAIL, id: 35282

When I use unbound.conf with 8.8.8.8 then I also get NOERROR.

So both, unbound and dnscrypt, seem to be working fine. But not together though? Cannot figure out why!?

Last edited by rgzfxf6bhu (2017-09-17 19:56:14)

rgzfxf6bhu

Member

Registered: 2015-10-30

Posts: 101

Re: [SOLVED] dnscrypt and unbound cannot communicate with eachother

Seems that I needed to add do-not-query-localhost: no.
Source: https://serverfault.com/a/699124

Now it works.

circleface

Member

Registered: 2012-05-26

Posts: 639

Re: [SOLVED] dnscrypt and unbound cannot communicate with eachother

Make sure you remember to mark your thread as solved by editing the first post and prepending [SOLVED] to the title.

rgzfxf6bhu

Member

Registered: 2015-10-30

Posts: 101

Re: [SOLVED] dnscrypt and unbound cannot communicate with eachother

True, marked solved