Dear community I hope you can help me with a question about setting up unbound to query local dns servers too? It is very remotely related to the switch from Opnsense to Nethsecurity because unbound was the local DNS server of choice on the Opnsense setup. Hence the category chat.
Rspamd setup of my (non ns8) mail-server was working nicely with the unbound-Opnsense setup. Nethsecurity uses Dnsmasq;
However the DNS intensive rspamd works better/faster with unbound. So I setup unbound on my mail instance as the DNS resolver, and it works great.
Except is does not resolve hosts on the lan.. If I forward all DNS request to Nethsecurity it does resolve hosts on the lan, however rspamd starts to fill up logs related to DNS queries.
So back to my question:
How can I set up unbound as a DNS resolver which (besides root DNS servers) also queries local DNS servers without forwarding all DNS request to the local (Nethsecurity) DNS server?
BTW:
With at the time of writing unreleased fix (already inuse by me) for redirection of all DNS queries to nethsecurity’s Dnsmasq; I needed to add a (dns) filter-bypass in Nethsecurity so the unbound resolver on my mail-server behind the Nethsec firewall could work.
cc/@stephdl : I wonder if NS8 adds this filter-bypass if it is behind a nethsec firewall?