===== service unbound =====

useflags:
> ''threads -debug -dnstap -ecdsa -gost -libressl -python -static-libs''

==== diff /etc/unbound/unbound.conf ====
<code>
49,50d48
< 	interface: 192.168.178.111
< 	interface: 192.168.168.1
202d199
< 	do-ip6: no
255,256d251
< 	access-control: 192.168.178.0/24 allow_snoop
< 	access-control: 192.168.168.0/24 allow_snoop
351d345
< 	root-hints: "/etc/unbound/named.cache"
355d348
< 	hide-identity: yes
359d351
< 	hide-version: yes
449d440
< 	private-domain: "home.lan"
457d447
< 	unwanted-reply-threshold: 1000
470d459
< 	prefetch: yes
667,668d655
< 	local-zone: "home.lan" static
< 	include: "/etc/unbound/blockservers"
720,736d706
< 	local-data: "marduk.home.lan     IN A 192.168.178.3"
< 	local-data: "v_marduk.home.lan   IN A 192.168.168.3"
< 	local-data: "enki.home.lan       IN A 192.168.178.4"
< 	local-data: "nabu.home.lan       IN A 192.168.178.5"
< 	local-data: "tina.home.lan       IN A 192.168.178.8"
< 	local-data: "romkindle.home.lan  IN A 192.168.178.33"
< 	local-data: "slodphone.home.lan  IN A 192.168.178.36"
< 	local-data: "romphone.home.lan   IN A 192.168.178.43"
< 	local-data: "hades.home.lan      IN A 192.168.178.111"
< 
< 	local-data: "hel.home.lan        IN A 10.47.112.1"
< 	local-data: "hermodr.home.lan    IN A 10.47.112.8"
< 	local-data: "baldr.home.lan      IN A 10.47.112.12"
< 	local-data: "srvli14.home.lan    IN A 10.47.112.20"
< 	local-data: "hidden.home.lan     IN A 10.47.112.22"	
< 	
< 
742,757d711
< 	local-data-ptr: "192.168.178.3   marduk.home.lan"
< 	local-data-ptr: "192.168.168.3   v_marduk.home.lan"
< 	local-data-ptr: "192.168.178.4   enki.home.lan"
< 	local-data-ptr: "192.168.178.5   nabu.home.lan"
< 	local-data-ptr: "192.168.178.8   tina.home.lan"
< 	local-data-ptr: "192.168.178.33  romkindle.home.lan"
< 	local-data-ptr: "192.168.178.36  slodphone.home.lan"
< 	local-data-ptr: "192.168.178.43  romphone.home.lan"
< 	local-data-ptr: "192.168.178.111 hades.home.lan"
< 
< 	local-data-ptr: "10.47.112.1    hel.home.lan"
< 	local-data-ptr: "10.47.112.8    hermodr.home.lan"
< 	local-data-ptr: "10.47.112.12   baldr.home.lan"
< 	local-data-ptr: "10.47.112.20   srvli14.home.lan"
< 	local-data-ptr: "10.47.112.22   hidden.home.lan"
< 
953,955d906
< forward-zone:
< 	name: "."
< 	forward-addr: 217.0.43.113
</code>

=== update dns blocklist ===

<code>
while read l; do echo local-zone: \"$l\" redirect ; echo local-data: \"$l A 127.0.0.1\"; done < block > blockservers
/etc/init.d/unbound reload
</code>