Pi-Hole/docs
1
0
Fork 0
mirror of https://github.com/pi-hole/docs.git synced 2026-02-15 07:26:03 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #16 from pi-hole/tweak/unbound

Browse Source 
Update Pi-hole + unbound guide
This commit is contained in:
Adam Warner
2018-05-12 16:17:07 +01:00
committed by GitHub
parent cde7c4cb77 8338520097
commit c48c21d4ef
1 changed files with 8 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
docs/guides/unbound.md
View File

@@ -85,13 +85,13 @@ server:
# Require DNSSEC data for trust-anchored zones, if such data is absent, the zone becomes BOGUS
harden-dnssec-stripped: yes
# Use Capitalization randomization
# This is an experimental resilience method which uses upper and lower case letters
# in the question hostname to obtain randomness. Two names with the same spelling
# but different case should be treated as identical. Attackers hoping to poison a
# DNS cache must guess the mixed-case encoding of the query. This increases the
# difficulty of such an attack significantly
use-caps-for-id: yes
# Don't use Capitalization randomization as it known to cause DNSSEC issues sometimes
# see https://discourse.pi-hole.net/t/unbound-stubby-or-dnscrypt-proxy/9378 for further details
use-caps-for-id: no
# Reduce EDNS reassembly buffer size.
# Suggested by the unbound man page to reduce fragmentation reassembly problems
edns-buffer-size: 1472
# TTL bounds for cache
cache-min-ttl: 3600
@@ -133,4 +133,4 @@ Finally, configure Pi-hole to use your recursive DNS server:
![screenshot at 2018-04-18](../images/RecursiveResolver.png)
(don't forget to hit Return or click on `Save`)
(don't forget to hit Return or click on `Save`)