<?xml version="1.0"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
	<id>https://nurdspace.nl/index.php?action=history&amp;feed=atom&amp;title=UnboundRecursorConfig</id>
	<title>UnboundRecursorConfig - Revision history</title>
	<link rel="self" type="application/atom+xml" href="https://nurdspace.nl/index.php?action=history&amp;feed=atom&amp;title=UnboundRecursorConfig"/>
	<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=UnboundRecursorConfig&amp;action=history"/>
	<updated>2026-04-19T04:37:06Z</updated>
	<subtitle>Revision history for this page on the wiki</subtitle>
	<generator>MediaWiki 1.39.4</generator>
	<entry>
		<id>https://nurdspace.nl/index.php?title=UnboundRecursorConfig&amp;diff=15732&amp;oldid=prev</id>
		<title>R3boot: Created page with &quot;== /etc/unbound/unbound.conf ==   server:    interface: 127.0.0.1    access-control: 127.0.0.1/32 allow      # Allow xs from localhost    access-control: 192.168.122.0/24 allow  # Allow xs from virtual machines on laptop    trust-anchor-file: &quot;/etc/unbound/dnssec-root.key&quot;    unblock-lan-zones: yes    insecure-lan-zones: yes    chroot: &quot;&quot;    remote-control:    control-enable: yes    include: /etc/unbound/conf.d/*.conf  == /etc/unbound/conf.d/nurdspace.conf ==   server:...&quot;</title>
		<link rel="alternate" type="text/html" href="https://nurdspace.nl/index.php?title=UnboundRecursorConfig&amp;diff=15732&amp;oldid=prev"/>
		<updated>2026-02-25T15:40:18Z</updated>

		<summary type="html">&lt;p&gt;Created page with &amp;quot;== /etc/unbound/unbound.conf ==   server:    interface: 127.0.0.1    access-control: 127.0.0.1/32 allow      # Allow xs from localhost    access-control: 192.168.122.0/24 allow  # Allow xs from virtual machines on laptop    trust-anchor-file: &amp;quot;/etc/unbound/dnssec-root.key&amp;quot;    unblock-lan-zones: yes    insecure-lan-zones: yes    chroot: &amp;quot;&amp;quot;    remote-control:    control-enable: yes    include: /etc/unbound/conf.d/*.conf  == /etc/unbound/conf.d/nurdspace.conf ==   server:...&amp;quot;&lt;/p&gt;
&lt;p&gt;&lt;b&gt;New page&lt;/b&gt;&lt;/p&gt;&lt;div&gt;== /etc/unbound/unbound.conf ==&lt;br /&gt;
&lt;br /&gt;
 server:&lt;br /&gt;
   interface: 127.0.0.1&lt;br /&gt;
   access-control: 127.0.0.1/32 allow      # Allow xs from localhost&lt;br /&gt;
   access-control: 192.168.122.0/24 allow  # Allow xs from virtual machines on laptop&lt;br /&gt;
   trust-anchor-file: &amp;quot;/etc/unbound/dnssec-root.key&amp;quot;&lt;br /&gt;
   unblock-lan-zones: yes&lt;br /&gt;
   insecure-lan-zones: yes&lt;br /&gt;
   chroot: &amp;quot;&amp;quot;&lt;br /&gt;
 &lt;br /&gt;
 remote-control:&lt;br /&gt;
   control-enable: yes&lt;br /&gt;
 &lt;br /&gt;
 include: /etc/unbound/conf.d/*.conf&lt;br /&gt;
&lt;br /&gt;
== /etc/unbound/conf.d/nurdspace.conf ==&lt;br /&gt;
&lt;br /&gt;
 server:&lt;br /&gt;
   domain-insecure: &amp;quot;nurdspace.nl&amp;quot;&lt;br /&gt;
   domain-insecure: &amp;quot;nurd.space&amp;quot;&lt;br /&gt;
 &lt;br /&gt;
 forward-zone:&lt;br /&gt;
   name: &amp;quot;space.nurdspace.nl&amp;quot;&lt;br /&gt;
   forward-addr: 10.208.1.53&lt;br /&gt;
 &lt;br /&gt;
 forward-zone:&lt;br /&gt;
   name: &amp;quot;git.nurd.space&amp;quot;&lt;br /&gt;
   forward-addr: 10.208.1.53&lt;br /&gt;
 &lt;br /&gt;
 forward-zone:&lt;br /&gt;
   name: &amp;quot;saml.nurd.space&amp;quot;&lt;br /&gt;
   forward-addr: 10.208.1.53&lt;br /&gt;
 &lt;br /&gt;
 forward-zone:&lt;br /&gt;
   name: &amp;quot;metrics.nurd.space&amp;quot;&lt;br /&gt;
   forward-addr: 10.208.1.53&lt;br /&gt;
 &lt;br /&gt;
 forward-zone:&lt;br /&gt;
   name: &amp;quot;nurd.space&amp;quot;&lt;br /&gt;
   forward-addr: 10.208.1.53&lt;br /&gt;
 &lt;br /&gt;
 forward-zone:&lt;br /&gt;
   name: &amp;quot;nurdspace.nl&amp;quot;&lt;br /&gt;
   forward-addr: 10.208.1.53&lt;br /&gt;
 &lt;br /&gt;
 forward-zone:&lt;br /&gt;
   name: &amp;quot;portal.nurdspace.nl&amp;quot;&lt;br /&gt;
   forward-addr: 10.208.1.53&lt;br /&gt;
 &lt;br /&gt;
 forward-zone:&lt;br /&gt;
   name: &amp;quot;vm.nurd.space&amp;quot;&lt;br /&gt;
   forward-addr: 10.208.1.53&lt;br /&gt;
 &lt;br /&gt;
 forward-zone:&lt;br /&gt;
   name: &amp;quot;lan.nurd.space&amp;quot;&lt;br /&gt;
   forward-addr: 10.208.1.53&lt;br /&gt;
 &lt;br /&gt;
 forward-zone:&lt;br /&gt;
   name: &amp;quot;dhcp.nurd.space&amp;quot;&lt;br /&gt;
   forward-addr: 10.208.1.53&lt;br /&gt;
&lt;br /&gt;
== update-unbound-blocklists ==&lt;br /&gt;
&lt;br /&gt;
 #!/usr/bin/env bash&lt;br /&gt;
 &lt;br /&gt;
 set -euo pipefail&lt;br /&gt;
 &lt;br /&gt;
 UPSTREAM_BLACKLISTS=&amp;quot;&lt;br /&gt;
 https://www.github.developerdan.com/hosts/lists/ads-and-tracking-extended.txt&lt;br /&gt;
 https://www.github.developerdan.com/hosts/lists/facebook-extended.txt&lt;br /&gt;
 https://www.github.developerdan.com/hosts/lists/amp-hosts-extended.txt&lt;br /&gt;
 https://www.github.developerdan.com/hosts/lists/dating-services-extended.txt&lt;br /&gt;
 https://www.github.developerdan.com/hosts/lists/hate-and-junk-extended.txt&lt;br /&gt;
 https://www.github.developerdan.com/hosts/lists/tracking-aggressive-extended.txt&lt;br /&gt;
 https://raw.githubusercontent.com/PolishFiltersTeam/KADhosts/master/KADhosts.txt&lt;br /&gt;
 https://raw.githubusercontent.com/FadeMind/hosts.extras/master/add.Spam/hosts&lt;br /&gt;
 https://v.firebog.net/hosts/static/w3kbl.txt&lt;br /&gt;
 https://adaway.org/hosts.txt&lt;br /&gt;
 https://v.firebog.net/hosts/AdguardDNS.txt&lt;br /&gt;
 https://v.firebog.net/hosts/Admiral.txt&lt;br /&gt;
 https://raw.githubusercontent.com/anudeepND/blacklist/master/adservers.txt&lt;br /&gt;
 https://s3.amazonaws.com/lists.disconnect.me/simple_ad.txt&lt;br /&gt;
 https://v.firebog.net/hosts/Easylist.txt&lt;br /&gt;
 https://pgl.yoyo.org/adservers/serverlist.php?hostformat=hosts&amp;amp;showintro=0&amp;amp;mimetype=plaintext&lt;br /&gt;
 https://raw.githubusercontent.com/FadeMind/hosts.extras/master/UncheckyAds/hosts&lt;br /&gt;
 https://raw.githubusercontent.com/bigdargon/hostsVN/master/&lt;br /&gt;
 https://s3.amazonaws.com/lists.disconnect.me/simple_malvertising.txt&lt;br /&gt;
 https://v.firebog.net/hosts/Easyprivacy.txt&lt;br /&gt;
 https://v.firebog.net/hosts/Prigent-Ads.txt&lt;br /&gt;
 https://raw.githubusercontent.com/FadeMind/hosts.extras/master/add.2o7Net/hosts&lt;br /&gt;
 https://raw.githubusercontent.com/crazy-max/WindowsSpyBlocker/master/data/hosts/spy.txt&lt;br /&gt;
 https://hostfiles.frogeye.fr/firstparty-trackers-hosts.txt&lt;br /&gt;
 https://raw.githubusercontent.com/DandelionSprout/adfilt/master/Alternate%20versions%20Anti-Malware%20List/AntiMalwareHosts.txt&lt;br /&gt;
 https://osint.digitalside.it/Threat-Intel/lists/latestdomains.txt&lt;br /&gt;
 https://s3.amazonaws.com/lists.disconnect.me/simple_malvertising.txt&lt;br /&gt;
 https://v.firebog.net/hosts/Prigent-Crypto.txt&lt;br /&gt;
 https://raw.githubusercontent.com/FadeMind/hosts.extras/master/add.Risk/hosts&lt;br /&gt;
 https://bitbucket.org/ethanr/dns-blacklists/raw/8575c9f96e5b4a1308f2f12394abd86d0927a4a0/bad_lists/Mandiant_APT1_Report_Appendix_D.txt&lt;br /&gt;
 https://phishing.army/download/phishing_army_blocklist_extended.txt&lt;br /&gt;
 https://malware-filter.gitlab.io/malware-filter/phishing-filter-hosts.txt&lt;br /&gt;
 https://gitlab.com/quidsup/notrack-blocklists/raw/master/notrack-malware.txt&lt;br /&gt;
 https://raw.githubusercontent.com/Spam404/lists/master/main-blacklist.txt&lt;br /&gt;
 https://raw.githubusercontent.com/AssoEchap/stalkerware-indicators/master/generated/hosts&lt;br /&gt;
 https://urlhaus.abuse.ch/downloads/hostfile/&lt;br /&gt;
 https://zerodot1.gitlab.io/CoinBlockerLists/hosts_browser&lt;br /&gt;
 &amp;quot;&lt;br /&gt;
 &lt;br /&gt;
 CACHE_DIR=&amp;quot;${HOME}/.cache/unbound_blocklists&amp;quot;&lt;br /&gt;
 CACHE_EXPIRY=&amp;quot;43200&amp;quot;&lt;br /&gt;
 &lt;br /&gt;
 install -d -m 0755 &amp;quot;${CACHE_DIR}&amp;quot;&lt;br /&gt;
 &lt;br /&gt;
 NOW=&amp;quot;$(date +%s)&amp;quot;&lt;br /&gt;
 &lt;br /&gt;
 function fetch_blocklist {&lt;br /&gt;
     BLOCKLIST=&amp;quot;${1}&amp;quot;&lt;br /&gt;
     CACHE_FILE=&amp;quot;${2}&amp;quot;&lt;br /&gt;
 &lt;br /&gt;
     curl -s -o &amp;quot;${CACHE_FILE}&amp;quot; &amp;quot;${BLOCKLIST}&amp;quot;&lt;br /&gt;
 }&lt;br /&gt;
 &lt;br /&gt;
 echo &amp;quot;server:&amp;quot;&lt;br /&gt;
 (for LIST in ${UPSTREAM_BLACKLISTS}; do&lt;br /&gt;
     CACHE_FILE=&amp;quot;${CACHE_DIR}/$(echo ${LIST} | sed -e &amp;#039;s,https://,,g&amp;#039; -e &amp;#039;s,\/,_,g&amp;#039;)&amp;quot;&lt;br /&gt;
     if [[ -f &amp;quot;${CACHE_FILE}&amp;quot; ]]; then&lt;br /&gt;
         FILE_AGE=&amp;quot;$(stat -c %Y ${CACHE_FILE})&amp;quot;&lt;br /&gt;
         DIFFERENCE=$(expr ${NOW} - ${FILE_AGE})&lt;br /&gt;
         if [[ ${DIFFERENCE} -gt ${CACHE_EXPIRY} ]]; then&lt;br /&gt;
             rm -f &amp;quot;${CACHE_FILE}&amp;quot;&lt;br /&gt;
             fetch_blocklist &amp;quot;${LIST}&amp;quot; &amp;quot;${CACHE_FILE}&amp;quot;&lt;br /&gt;
         fi&lt;br /&gt;
     else&lt;br /&gt;
         fetch_blocklist &amp;quot;${LIST}&amp;quot; &amp;quot;${CACHE_FILE}&amp;quot;&lt;br /&gt;
     fi&lt;br /&gt;
 &lt;br /&gt;
     cat &amp;quot;${CACHE_FILE}&amp;quot; | grep -E -v &amp;#039;^$|^#&amp;#039; | \&lt;br /&gt;
         sed -e &amp;#039;s,0.0.0.0 ,,g&amp;#039; -e &amp;#039;s,127.0.0.1 ,,g&amp;#039; -e &amp;#039;s,::1 ,,g&amp;#039; -e &amp;#039;s,\#.*,,g&amp;#039; -e &amp;#039;s,\.\.,\.,g&amp;#039; -e &amp;#039;s,.*@,,g&amp;#039; \&lt;br /&gt;
         | tr -d &amp;#039;\r&amp;#039; | awk &amp;#039;{ print $1 }&amp;#039; | sed -e &amp;#039;s,\.$,,g&amp;#039;&lt;br /&gt;
 done) | sort | uniq | while read DOMAIN; do&lt;br /&gt;
     echo &amp;quot;    local-data: \&amp;quot;${DOMAIN}. 10800 IN A 127.0.0.1\&amp;quot;&amp;quot;&lt;br /&gt;
 done&lt;/div&gt;</summary>
		<author><name>R3boot</name></author>
	</entry>
</feed>