<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">Es wird besser. rspamd scheint zu laufen. spamhaus wieder aktiv. Will jetzt noch unbound installieren.<div><br></div><div>Da gibt es eine Diskrepanz:</div><div><br></div><div>In der KI Anleitung steht, man solle </div><div><br></div><div>/etc/unbound/unbound.conf editieren und dort eine server Sektion einfügen:</div><div><br></div><div><span style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-size: 11px;"><font face="Courier">server:</font></span></div><div><span style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-size: 11px;"><font face="Courier"># Auf allen Interfaces lauschen, aber Anfragen von außen blockieren</font></span></div><div><span style="font-size: 11px;"><span style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);"><font face="Courier"> interface: </font></span><span style="font-family: Courier; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);">127.0.0.1</span></span></div><div><span style="font-family: Courier; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-size: 11px;"># Zugriff nur aus dem lokalen Netzwerk erlauben (Beispiel für Subnetz)</span></div><div><span style="font-family: Courier; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-size: 11px;"> access-control: 127.0.0.0/8 allow</span></div><div><span style="font-family: Courier; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-size: 11px;"> access-control: 192.168.1.0/24 allow</span></div><div><span style="font-size: 11px;"><br></span></div><div>In meiner unbound.conf steht aber als einzige Zeile:</div><div><br></div><div><font face="Courier New">include-toplevel: "/etc/unbound/unbound.conf.d/*.conf</font></div><div><br></div><div>und in dem Verzeichnis unbound.conf.d steht:</div><div><br></div><div><p style="margin: 0px; font-width: normal; line-height: normal; font-family: Courier; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal; color: rgb(119, 97, 0); background-color: rgb(187, 255, 220);"><span style="font-variant-ligatures: no-common-ligatures">root@mail:/etc/unbound/unbound.conf.d# cat root-auto-trust-anchor-file.conf </span></p>
<p style="margin: 0px; font-width: normal; line-height: normal; font-family: Courier; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal; color: rgb(119, 97, 0); background-color: rgb(187, 255, 220);"><span style="font-variant-ligatures: no-common-ligatures">server:</span></p>
<p style="margin: 0px; font-width: normal; line-height: normal; font-family: Courier; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal; color: rgb(119, 97, 0); background-color: rgb(187, 255, 220);"><span style="font-variant-ligatures: no-common-ligatures"> # The following line will configure unbound to perform cryptographic</span></p>
<p style="margin: 0px; font-width: normal; line-height: normal; font-family: Courier; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal; color: rgb(119, 97, 0); background-color: rgb(187, 255, 220);"><span style="font-variant-ligatures: no-common-ligatures"> # DNSSEC validation using the root trust anchor.</span></p>
<p style="margin: 0px; font-width: normal; line-height: normal; font-family: Courier; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal; color: rgb(119, 97, 0); background-color: rgb(187, 255, 220);"><span style="font-variant-ligatures: no-common-ligatures"> auto-trust-anchor-file: "/var/lib/unbound/root.key"</span></p></div><div><span style="font-variant-ligatures: no-common-ligatures"><br></span></div><div><span style="font-variant-ligatures: no-common-ligatures">Soll ich jetzt unbound.conf editieren und da die server: Sektion hineinsetzen oder soll ich die in dem inkludierten root-auto-trust... File </span></div><div><span style="font-variant-ligatures: no-common-ligatures">befindliche server: Sektion erweitern?</span></div><div><span style="font-variant-ligatures: no-common-ligatures"><br></span></div><div><span style="font-variant-ligatures: no-common-ligatures">Grüße</span></div><div><span style="font-variant-ligatures: no-common-ligatures">Christoph</span></div><div><span style="font-variant-ligatures: no-common-ligatures"><br></span></div></body></html>