Unbound configure for quad9

Installing and Using OpenWrt
1 
uci set unbound.fwd_google.enabled="0" uci set unbound.fwd_cloudflare.enabled="0" while uci -q del unbound.@zone[4]; do :; done uci add unbound zone uci set unbound.@zone[-1].enabled="1" uci set unbound.@zone[-1].fallback="0" uci set unbound.@zone[-1].zone_type="forward_zone" uci add_list unbound.@zone[-1].zone_name="quad9" uci add_list unbound.@zone[-1].server="9.9.9.9" uci add_list unbound.@zone[-1].server="149.112.112.112" uci add_list unbound.@zone[-1].server="2620:fe::fe" uci add_list unbound.@zone[-1].server="2620:fe::9" uci set unbound.@zone[-1].tls_upstream="1" uci set unbound.@zone[-1].tls_index="

dns.quad9.net


" uci commit unbound service unbound restart

this doesnt seem to b working

2

theres also stuff about DNS hijacking --

theres also the unbound documentation that says something different there too

i'm getting conflicting information about how to configure unbound - as well as confusing instructions about where to configure unbound

I am trying to configure unbound to work with quad 9 instead of google

what is the right way to do this? or is there no solution . . . is there someone who has done this before?

3

What reaction you expect on your ai generated litter soup?

1 Like
4

apologies, Ive been working on trying to get a few programs set up on my open wrt one and having a lot of difficulty getting anyprogram im tryin to work (adblock, unbound, and wireguard with mullvad)

I have a disability, and i've only just started using linux about a month ago so I'm pretty lacking in things that might be considered common knowledge

do you think im on the right forum to get help for this? where should I go if this is the wrong forum?
(for trying to set up unbound to use quad nine instead of google / cloud)

if you dont mind sharing, why do you think my post is ai generated?

5

AdBlock should be fairly easy to configure, which one of the ones available are you using ?
What's the use case for unbound?

Wireguard guide by @egc - https://github.com/egc112/OpenWRT-egc-add-on/blob/main/notes/OpenWRT%20WireGuard%20Client%20Setup%20guide%20using%20LuCi.pdf

6

I am trying to use unbound to encrypt DNS - and use quad 9 - I believe its called dns over tls? or maybe the other way around

7

Use https-DNS-proxy instead, way easier to set up, unless you need DoT instead of DoH.

Depending on which adblock package you pick, it might already have DoT or DoH built in (I believe AGH does).

8

i'm looking for recrusive DNS - and to use quad nine specifically

and I think that means I need DoT

9

OK - https://quad9.net/news/blog/doh-with-quad9-dns-servers/ ?

10

it looks like quad nine has Doh support - but how do I get..

unbound to run through quad nine? that was my first post I was attempting to change the config of unbound - but it didnt seem to do anything when I checked in terminal - the IP appeared the same as before

as well as quad nine only worked in browser when I forced it to through browser settings

Ideally I want my router to force DNS / encrypt the Dns as well
but i've also found conflicting information about whether I should delete
dnsmasq or delete ohcdp (?) I always mess up the acronym

and I can't find good info on what they do / what the difference is between them (it seems unbound can work with one or the other, but I don't know why)

11

You need to disable secure DNS on OS level and in browsers or implement the hijacking you linked to earlier and block DoT and DoH in the router.
It's all described on the hijacking page.

12

You go to services → Unbound DNS → zones where you can add the nameservers you found at Quad9

13

That is mutually exclusive. Cant help you changing what quad9 uses for recursive DNS.

14

like disable secure DNS on laptop or phone? or do you mean on my router OS

how would I input the hijacking method into an openwrt one router?

15

can you help me understand how the two are mutually exclusive?

I'm confused because unbound seems to be able to be conifgured to custom servers (default seems to be google)
but I want to change default to quad9 instead

what do you mean? I don't understand

16

On both, if you want to control it.

Yes, that's what the link you posted is about.

You don't control Q9's upstream DNSes.

17

ok thank you! I have tried this one - and it still didn't seem to work
it appeared in terminal as if my IP was unchanged / did not seem to be able to connect to quad nine

do you know of a way to check for sure if i'm using quad 9 thru terminal? (i'm having trouble because each output is a little confusing for me, and everyone seems to have a different set of commands to try)

18

so if i'm putting quad 9 into unbound does it break it?

19

Why would your IP change when you swap DNS ?

Break what ?

20

when trying to set up DNS - they usually say - check if your laptop can connect to quad nine or clearbrowsing or whatnot

but i'm not getting the outputs in terminal that would say I successfully connected to quad 9 or that anything seemed to change

I may be just totally misunderstanding something though - how do you check if dns works through terminal? (im using linux mint - and the router is openwrt 1)