v6.35

+ DietPi-Software | Unbound: Add default config file as GitHub download

.conf/dps_182/unbound.conf

@@ -0,0 +1,81 @@
+server:
+	verbosity: 0
+
+	interface: 0.0.0.0
+	port: 53
+	do-ip4: yes
+	do-udp: yes
+	do-tcp: yes
+
+	do-ip6: yes
+	prefer-ip6: no
+
+	root-hints: "/var/lib/unbound/root.hints"
+
+	harden-glue: yes
+	harden-large-queries: yes
+
+	harden-dnssec-stripped: yes
+
+	use-caps-for-id: yes
+
+	edns-buffer-size: 1472
+
+	rrset-roundrobin: yes
+
+	cache-min-ttl: 300
+	cache-max-ttl: 86400
+
+	serve-expired: yes
+
+	harden-algo-downgrade: yes
+
+	harden-short-bufsize: yes
+
+	hide-identity: yes
+
+	identity: "Server"
+
+	hide-version: yes
+
+	do-daemonize: no
+
+	neg-cache-size: 4M
+
+	qname-minimisation: yes
+
+	minimal-responses: yes
+
+	prefetch: yes
+	prefetch-key: yes
+
+	num-threads: 1
+
+	msg-cache-size: 50m
+	rrset-cache-size: 100m
+
+	so-reuseport: yes
+
+	so-rcvbuf: 4m
+	so-sndbuf: 4m
+
+	unwanted-reply-threshold: 10000
+
+	ratelimit: 1000
+
+	log-queries: no
+	log-replies: no
+	logfile: ''
+
+	access-control: 0.0.0.0/0 refuse
+	access-control: 10.0.0.0/8 allow
+	access-control: 127.0.0.1/8 allow
+	access-control: 172.16.0.0/12 allow
+	access-control: 192.168.0.0/16 allow
+
+	private-address: 10.0.0.0/8
+	private-address: 172.16.0.0/12
+	private-address: 192.168.0.0/16
+	private-address: 169.254.0.0/16
+	private-address: fd00::/8
+	private-address: fe80::/10