Unbound unbound_manager (Manager/Installer utility for unbound - Recursive DNS Server)

[immi803]

I think as you set your DNS for wan you are skipping your local Unbound, or switched it to other forwarder ...

Than how to turn off automatic dns , if we switch it to manual, there's no way without anything in dns to save it

 

[Milan]

Than how to turn off automatic dns , if we switch it to manual, there's no way without anything in dns to save it

as you set DNS then it will ask these servers instead of your local one. set it to auto, switch off securities and see unbound stats if it is resolving something.

check unbound stats even with yours conf now if unbound is resolving something.

 

[immi803]

as you set DNS then it will ask these servers instead of your local one. set it to auto, switch off securities and see unbound stats if it is resolving something.

check unbound stats even with yours conf now if unbound is resolving something.

Here it's processing with manual dns input already, is it working properly, i doubt setting it at auto will make unbound not to work, as dev clearly mentioned to remove auto dns

 

[BeHappy]

@immi803 How did you add the Unbound tab into the Merlin Firmware?
Thanks!

ONEPLUS 5T with Tapatalk

 

[Treadler]

Than how to turn off automatic dns , if we switch it to manual, there's no way without anything in dns to save it

Wan Dns auto = yes, or Dns manual = yes, (& a server, or servers nominated) no matter. It’s just there as a fallback if for some reason Unbound decides not to work.

Dns filter on, set to router, no dns servers entered, & you’re good to go.

 

[Milan]

Wan Dns auto = yes, or Dns manual = yes, (& a server, or servers nominated) no matter. It’s just there as a fallback if for some reason Unbound decides not to work.

Dns filter on, set to router, no dns servers entered, & you’re good to go.

this is my config

 

[juched]

@immi803 How did you add the Unbound tab into the Merlin Firmware?
Thanks!

ONEPLUS 5T with Tapatalk

From the unbound_manager script run "sgui" command.

 

[immi803]

Wan Dns auto = yes, or Dns manual = yes, (& a server, or servers nominated) no matter. It’s just there as a fallback if for some reason Unbound decides not to work.

Dns filter on, set to router, no dns servers entered, & you’re good to go.

One more question
Do i need to edit configuration for ipv6 as i already mentioned that I've ipv6 default with ipv4 as fall back or i don't need to change anything, unbound taking care of this by itself?

 

[Martineau]

One more question
Do i need to edit configuration for ipv6 as i already mentioned that I've ipv6 default with ipv4 as fall back or i don't need to change anything, unbound taking care of this by itself?
View attachment 22483 View attachment 22484

'unbound_manager' should enable basic IPv6 support for unbound if you are using IPv6

i.e. the IPv6 section in 'unbound.conf' will automatically be uncommented:

#########################################
# integration IPV6
#
do-ip6: yes
interface: ::0
access-control: ::0/0 refuse
access-control: ::1 allow
private-address: fd00::/8
private-address: fe80::/10
#########################################

P.S. I think 'prefer-ipv6: yes' is the default anyway.

 

[SomeWhereOverTheRainBow]

I am not against choice, but there is no advantage to using unbound to forward to DoT then stubby, so suggest it be removed. Need to keep the script (maybe v3.0) clean and focused

Yea to me, unless you are using unbound to cast out your own DoT server from like a cloud base solution, I see no advantage to using DoT on unbound. From my point, I see unbound as the recursive caching server.

 

[Treadler]

One more question
Do i need to edit configuration for ipv6 as i already mentioned that I've ipv6 default with ipv4 as fall back or i don't need to change anything, unbound taking care of this by itself?
View attachment 22483 View attachment 22484

Just install, Unbound knows what to do.

 

[Ubimo]

Today a lot of entware package updates were available via amtm. I tried to update, but two packages won't update.
unbound-daemon
libncursesw
How can I resolve that?

 

[Mutzli]

Today a lot of entware packages updates were available. I tried to update, but two packages won't update.
unbound-daemon
libncursesw
How can I resolve that?

Yes, same here. When trying to install it separate I get the following error message:
opkg install libncursesw
Upgrading libncursesw on root from 6.1-5 to 6.2-1...
Downloading http://bin.entware.net/aarch64-k3.10/libncursesw_6.2-1_aarch64-3.10.ipk
Collected errors:
* check_data_file_clashes: Package libncursesw wants to install file /opt/lib/libform.so.6
But that file is already provided by package * libncurses
* check_data_file_clashes: Package libncursesw wants to install file /opt/lib/libmenu.so.6
But that file is already provided by package * libncurses
* check_data_file_clashes: Package libncursesw wants to install file /opt/lib/libncurses.so.6
But that file is already provided by package * libncurses
* check_data_file_clashes: Package libncursesw wants to install file /opt/lib/libpanel.so.6
But that file is already provided by package * libncurses
* opkg_install_cmd: Cannot install package libncursesw.

 

[Wolfschiesst]

Try this:

 opkg install --force-reinstall libncursesw

 

[Wolfschiesst]

See also: https://openwrt.org/docs/guide-user/additional-software/opkg

 

[Mutzli]

Try this:

 opkg install --force-reinstall libncursesw

Yes, I was just about to do that. Read the user guide and found the force reinstall command at the same time you posted this. Oh, and it did work!

 

[Ubimo]

Yes, thanks, that worked, but I cannot update unbound-daemon...
Even

 opkg install --force-reinstall unbound-daemon

did not work.
It says

admin@myrouter:/tmp/home/root#  opkg install --force-reinstall unbound-daemon
No packages removed.
Installing unbound-daemon (1.10.0-2) to root...
Downloading http://bin.entware.net/armv7sf-k2.6/unbound-daemon_1.10.0-2_armv7-2.6.ipk
Installing libunbound-light (1.10.0-2) to root...
Downloading http://bin.entware.net/armv7sf-k2.6/libunbound-light_1.10.0-2_armv7-2.6.ipk
Collected errors:
 * check_data_file_clashes: Package libunbound-light wants to install file /opt/lib/libunbound.so.8
        But that file is already provided by package  * libunbound
 * opkg_install_cmd: Cannot install package unbound-daemon.
admin@myrouter:/tmp/home/root#

I still see that there is an update available.

 

[Mutzli]

Yes, thanks, that worked, but I cannot update unbound-daemon...
Even

 opkg install --force-reinstall unbound-daemon

did not work.
It says

admin@myrouter:/tmp/home/root#  opkg install --force-reinstall unbound-daemon
No packages removed.
Installing unbound-daemon (1.10.0-2) to root...
Downloading http://bin.entware.net/armv7sf-k2.6/unbound-daemon_1.10.0-2_armv7-2.6.ipk
Installing libunbound-light (1.10.0-2) to root...
Downloading http://bin.entware.net/armv7sf-k2.6/libunbound-light_1.10.0-2_armv7-2.6.ipk
Collected errors:
 * check_data_file_clashes: Package libunbound-light wants to install file /opt/lib/libunbound.so.8
        But that file is already provided by package  * libunbound
 * opkg_install_cmd: Cannot install package unbound-daemon.
admin@myrouter:/tmp/home/root#

I still see that there is an update available.

Did you try to reinstall unbound from the unbound menu?

 

[Ubimo]

Thanks, removing and reinstalling unbound did the trick.
Edit:
No, now it says

/jffs/addons/unbound/unbound_manager.sh: line 3257: unbound-checkconf: not found

Trying again to uninstall, reboot, reinstall...

Can't install anymore... Installation always stops here:

A:Option ==> i

        Router Configuration recommended pre-reqs status:

        [✔] Swapfile=2097148 kB
        [✔] DNS Filter=ON
        [✔] DNS Filter=ROUTER
        [✔] WAN: Use local caching DNS server as system resolver=NO
        [✔] Enable local NTP server=YES
        [✔] Enable DNS Rebind protection=NO
        [✔] Enable DNSSEC support=NO

        Options: unbound Advanced install - User will be prompted to install options


INSTALLing unbound
Entware package list successfully updated
Installing unbound-checkconf (1.10.0-2) to root...
Downloading http://bin.entware.net/armv7sf-k2.6/unbound-checkconf_1.10.0-2_armv7-2.6.ipk
Installing libunbound-light (1.10.0-2) to root...
Downloading http://bin.entware.net/armv7sf-k2.6/libunbound-light_1.10.0-2_armv7-2.6.ipk
Installing unbound-control-setup (1.10.0-2) to root...
Downloading http://bin.entware.net/armv7sf-k2.6/unbound-control-setup_1.10.0-2_armv7-2.6.ipk
Installing unbound-daemon (1.10.0-2) to root...
Downloading http://bin.entware.net/armv7sf-k2.6/unbound-daemon_1.10.0-2_armv7-2.6.ipk
Installing unbound-control (1.10.0-2) to root...
Downloading http://bin.entware.net/armv7sf-k2.6/unbound-control_1.10.0-2_armv7-2.6.ipk
Package unbound-control (1.10.0-2) installed in root is up to date.
Installing unbound-anchor (1.10.0-2) to root...
Downloading http://bin.entware.net/armv7sf-k2.6/unbound-anchor_1.10.0-2_armv7-2.6.ipk
Package unbound-daemon (1.10.0-2) installed in root is up to date.
Configuring unbound-daemon.
Configuring unbound-control.
Configuring unbound-control-setup.
Configuring unbound-anchor.
Collected errors:
 * check_data_file_clashes: Package libunbound-light wants to install file /opt/lib/libunbound.so.8
        But that file is already provided by package  * libunbound
 * opkg_install_cmd: Cannot install package unbound-checkconf.


        ***ERROR occurred installing unbound

Edit:
I did

opkg remove libunbound

Then I could install unbound again.

 

[Treadler]

Try this:

 opkg install --force-reinstall libncursesw

That fixed it.