ip range

google "ipinfo + asxxxxx"

facebook    as32934
google        as15169
microsoft    as8075

unbound dns server

在rc.conf加入
local_unbound_enable="YES"

新增/var/unbound/unbound.conf
server:
        username:unbound
        directory: /var/unbound
        chroot: /var/unbound
        pidfile: /var/run/local_unbound.pid
        auto-trust-anchor-file: /var/unbound/root.key

        interface: 172.16.0.1
        interface:172.16.192.1
        access-control: 172.16.0.0/15 allow

private-domain: "nat"
local-zone: "nat." static
local-data: "nat. IN A 1.1.1.1"
local-data-ptr: "1.1.1.1 nat"

include: /var/unbound/forward.conf

新增/var/unbound/forward.conf

forward-zone:

        name: .

        forward-addr: 168.95.1.1

        forward-addr: 8.8.8.8

然後 service local_unbound start 啟動即可

設定 DNS log

在 "/var/named/etc/namedb/named.conf"裡加入這段

logging {
  channel querylog {
    file "/var/log/query.log/var/named/var/log/query.log" versions 5 size 50m;
    print-category yes;
    print-severity yes;
    print-time yes;
  };
  category queries { querylog; };
};

然後
rndc reload
rndc querylog
即可


補充：bind的權限不足以寫入/var/log