Saturday, February 28, 2026

Re: Unbound RPZ zones and num-threads greater than 1

> # unbound-control auth_zone_reload rpz.test
?
? $ nslookup whitehouse.com
> DO NOT use web browser! (porn)
> Useful only for testing block filters.

Oops I typed the last part to quickly.

Restarting unbound with
rcctl restart unbound
works but that's overkill.
It should by reloading just the zone
# unbound-control auth_zone_reload rpz.test
ok
(after editing the rpz.zone file)

My biggest mistake is the nslookup.
In testing use
nslookup whitehouse.com 127.0.0.1
The 127.0.0.1 is important so it
goes to unbound instead of what's
configured in resolc.conf!

I did append 127.0.0.1 in my testing but
forgot to type it when creating my post
and that was a big boo boo.

No comments:

Post a Comment