README
1These files are contributed to unbound, and are not part of the official
2distribution but may be helpful.
3
4* rc_d_unbound: FreeBSD compatible /etc/rc.d script.
5* parseunbound.pl: perl script to run from cron that parses statistics from
6 the log file and stores them.
7* unbound.spec and unbound.init: RPM specfile and Linux rc.d initfile.
8* update-anchor.sh: shell script that uses unbound-host to update a set
9 of trust anchor files. Run from cron twice a month.
10* unbound_munin_ : plugin for munin statistics report
11* unbound_cacti.tar.gz : setup files for cacti statistics report
12* selinux: the .fc and .te files for SElinux protection of the unbound daemon
13* unbound.plist: launchd configuration file for MacOSX.
14* build-unbound-localzone-from-hosts.pl: perl script to turn /etc/hosts into
15 a local-zone and local-data include file for unbound.conf.
16* unbound-host.nagios.patch: makes unbound-host return status that fits right
17 in with the nagios monitoring framework. Contributed by Migiel de Vos.
18* patch_rsamd5_enable.diff: this patch enables RSAMD5 validation (otherwise
19 it is treated as insecure). The RSAMD5 algorithm is deprecated (RFC6725).
20* create_unbound_ad_servers.sh: shell script to enter anti-ad server lists.
21* create_unbound_ad_servers.cmd: windows script to enter anti-ad server lists.
22* unbound_cache.sh: shell script to save and load the cache.
23* unbound_cache.cmd: windows script to save and load the cache.
24* warmup.sh: shell script to warm up DNS cache by your own MRU domains.
25* warmup.cmd: windows script to warm up DNS cache by your own MRU domains.
26* aaaa-filter-iterator.patch: adds config option aaaa-filter: yes that
27 works like the BIND feature (removes AAAA records unless AAAA-only domain).
28 Useful for certain 'broken IPv6 default route' scenarios.
29 Patch from Stephane Lapie for ASAHI Net.
30* unbound_smf23.tar.gz: Solaris SMF installation/removal scripts.
31 Contributed by Yuri Voinov.
32* unbound.socket and unbound.service: systemd files for unbound, install them
33 in /usr/lib/systemd/system. Contributed by Sami Kerola and Pavel Odintsov.
34* unbound_portable.service.in: systemd file for use unbound as portable service,
35 see comments in the file. Contributed by Frzk.
36* redirect-bogus.patch: Return configured address for bogus A and AAAA answers,
37 instead of SERVFAIL. Contributed by SIDN.
38* fastrpz.patch: fastrpz support from Farsight Security.
39* libunbound.so.conf: ltrace.conf file, see ltrace.conf(5), for libunbound.
40* unbound-querycachedb.py: utility to show data stored in cachedb backend
41 for a particular query name and type. It requires dnspython and (for
42 redis backend) redis Python modules.
43* unbound-fuzzme.patch: adds unbound-fuzzme program that parses a packet from
44 stdin. Used with fuzzers, patch from Jacob Hoffman-Andrews.
45* unbound-fuzzers.tar.bz2: three programs for fuzzing, that are 1:1
46 replacements for unbound-fuzzme.c that gets created after applying
47 the contrib/unbound-fuzzme.patch. They are contributed by
48 Eric Sesterhenn from X41 D-Sec.
49* drop-tld.diff: adds option drop-tld: yesno that drops 2 label queries,
50 to stop random floods. Apply with patch -p1 < contrib/drop-tld.diff and
51 compile. From Saksham Manchanda (Secure64). Please note that we think
52 this will drop DNSKEY and DS lookups for tlds and hence break DNSSEC
53 lookups for downstream clients.
54* drop2rpz: perl script that converts the Spamhaus DROP-List in RPZ-Format,
55 contributed by Andreas Schulze.
56* metrics.awk: awk script that can convert unbound-control stats to
57 Prometheus metrics format output.
58