Langsung tanpa basa-basi :
#whereis unbound
unbound : /usr/ports/dns/unbound
# cd /usr/ports/dns/unbound
# make install clean
jika muncul opsi-opsi klik ok saja alias ambil defaultnya aja sudah cukup
#rehash
#cd /usr/local/etc/unbound
#fetch ftp://FTP.INTERNIC.NET/domain/named.cache
#rehash
#unbound-control-setup
#chown unbound:wheel unbound_*
#chmod 440 unbound_*
#mkdir /usr/local/etc/unbound/dev
#echo "devfs /usr/local/etc/unbound/dev devfs rw 0 0" >> /etc/fstab
#echo 'unbound_enable="YES"' >> /etc/rc.conf
#echo 'devfs_set_rulesets="/usr/local/etc/unbound/dev=unbound_ruleset"' >> /etc/rc.conf
edit /usr/local/etc/unbound/unbound.conf
seperti ini
server:
verbosity: 1
statistics-interval: 120
extended-statistics: yes
statistics-cumulative: yes
num-threads: 1
interface: 0.0.0.0
outgoing-range: 512
num-queries-per-thread: 1024
msg-cache-size: 16m
rrset-cache-size: 32m
msg-cache-slabs: 4
rrset-cache-slabs: 4
cache-max-ttl: 86400
infra-host-ttl: 60
infra-lame-ttl: 120
infra-cache-numhosts: 10000
infra-cache-lame-size: 10k
do-ip4: yes
do-ip6: no
do-udp: yes
do-tcp: yes
do-daemonize: yes
#ip yang boleh mengakses unbound
access-control: 0.0.0.0/0 refuse
access-control: 192.168.10.0/24 allow
access-control: 192.168.20.0/24 allow
access-control: 192.168.40.0/24 allow
access-control: 192.168.50.0/24 allow
chroot: "/usr/local/etc/unbound"
username: "unbound"
directory: "/usr/local/etc/unbound"
logfile: ""
use-syslog: no
root-hints: "/usr/local/etc/unbound/named.cache"
identity: "DNS"
version: "1.4"
hide-identity: yes
hide-version: yes
harden-glue: yes
do-not-query-address: 127.0.0.1/8
do-not-query-localhost: yes
module-config: "iterator"
#zone localhost
local-zone: "localhost." static
local-data: "localhost. 10800 IN NS localhost."
local-data: "localhost. 10800 IN SOA localhost. nobody.invalid. 1 3600 1200 604800 10800"
local-data: "localhost. 10800 IN A 127.0.0.1"
local-zone: "127.in-addr.arpa." static
local-data: "127.in-addr.arpa. 10800 IN NS localhost."
local-data: "127.in-addr.arpa. 10800 IN SOA localhost. nobody.invalid. 2 3600 1200 604800 10800"
local-data: "1.0.0.127.in-addr.arpa. 10800 IN PTR localhost."
#zone jakkom.proxy.net (edit bagian ini sesuai ip proxy dan hostname
local-zone: "jakkom.proxy.net." static
local-data: "jakkom.proxy.net. 86400 IN NS ns1.jakkom.proxy.net."
local-data: "jakkom.proxy.net. 86400 IN SOA jakkom.proxy.net. hostmaster.jakkom.proxy.net. 3 3600 1200 604800 86400"
local-data: "jakkom.proxy.net. 86400 IN A 192.168.40.250"
local-data: "www.jakkom.proxy.net. 86400 IN A 192.168.40.250"
local-data: "ns1.jakkom.proxy.net. 86400 IN A 192.168.40.250"
#pada bagian ini ip proxy di tulis dengan urutan terbalik, perhatikan dengan teliti penulisannya
local-zone: "40.168.192.in-addr.arpa." static
local-data: "40.168.192.in-addr.arpa. 10800 IN NS jakkom.proxy.net."
local-data: "40.168.192.in-addr.arpa. 10800 IN SOA jakkom.proxy.net. hostmaster.jakkom.proxy.net. 4 3600 1200 604800 864000"
local-data: "250.40.168.192.in-addr.arpa. 10800 IN PTR jakkom.proxy.net."
#seting untuk DNS Forward
forward-zone:
name: "."
forward-addr: 202.134.1.10
forward-addr: 202.134.0.155
forward-addr: 8.8.8.8
forward-addr: 8.8.4.4
forward-addr: 208.67.222.222
forward-addr: 208.67.220.220
forward-addr: 180.131.144.144
forward-addr: 180.131.145.145
remote-control:
control-enable: yes
control-interface: 127.0.0.1
control-port: 953
server-key-file: "/usr/local/etc/unbound/unbound_server.key"
server-cert-file: "/usr/local/etc/unbound/unbound_server.pem"
control-key-file: "/usr/local/etc/unbound/unbound_control.key"
control-cert-file: "/usr/local/etc/unbound/unbound_control.pem"
edit di /usr/local/etc/squid/squid.conf bagian name server ganti dengan:
nameserver 127.0.0.1
edit di /etc/resolv.conf ganti dengan:
nameserver 127.0.0.1
bikin file dengan nama devfs.rules di /etc
#ee /etc/devfs.rules
####isinya seperti dibawah ini####
[unbound_ruleset=20]
add hide
add path null unhide
add path zero unhide
add path crypto unhide
add path random unhide
add path urandom unhide
simpan dan instalasi unbound selesai :)
#reboot
untuk di mikrotik silahkan bikin NAT untuk direct ke unbound nya..persis dengan direct proxy namun dengan protocol UDP port 53.
cek unbound :
#unbound-control stats