mirror of
https://github.com/minoplhy/DNSserver.git
synced 2024-11-24 10:16:54 +00:00
45 lines
1.9 KiB
Lua
45 lines
1.9 KiB
Lua
-- SPDX-License-Identifier: CC0-1.0
|
|
-- vim:syntax=lua:set ts=4 sw=4:
|
|
-- Refer to manual: https://knot-resolver.readthedocs.org/en/stable/
|
|
|
|
-- visit https://knot-resolver.readthedocs.io/en/stable/config-logging-monitoring.html for more info
|
|
log_level('info')
|
|
-- Network interface configuration
|
|
net.listen('127.0.0.1', 5353, { kind = 'dns' })
|
|
net.listen('::1', 5353, { kind = 'dns', freebind = true })
|
|
net.listen('0.0.0.0', 53, { kind = 'dns' })
|
|
net.listen('::', 53, { kind = 'dns', freebind = true })
|
|
|
|
|
|
-- Load useful modules
|
|
modules = {
|
|
'hints > iterate', -- Load /etc/hosts and allow custom root hints
|
|
'stats', -- Track internal statistics
|
|
'predict', -- Prefetch expiring/frequent records
|
|
'policy'
|
|
}
|
|
|
|
|
|
-- policy help : https://knot-resolver.readthedocs.io/en/stable/modules-policy.html
|
|
-- This is Just a Blocklist
|
|
policy.add(policy.rpz(policy.PASS, '/etc/knot-resolver/list/minopallow.txt',true))
|
|
policy.add(policy.rpz(policy.PASS, '/etc/knot-resolver/list/adguard-exceptions.txt',true))
|
|
policy.add(policy.rpz(policy.PASS, '/etc/knot-resolver/list/minoplhyallowlist.txt',true))
|
|
policy.add(policy.rpz(policy.REFUSE, '/etc/knot-resolver/list/minopdeny.txt',true))
|
|
policy.add(policy.rpz(policy.REFUSE, '/etc/knot-resolver/list/minoplhy.txt',true))
|
|
policy.add(policy.rpz(policy.REFUSE, '/etc/knot-resolver/list/minoplhyneto.txt',true))
|
|
policy.add(policy.rpz(policy.REFUSE, '/etc/knot-resolver/list/energized-ultimate.txt',true))
|
|
|
|
policy.add(policy.all(
|
|
policy.TLS_FORWARD({
|
|
-- multiple servers can be specified for a single slice
|
|
-- the one with lowest round-trip time will be used
|
|
--
|
|
-- You can changes this as your choices address below is DOT
|
|
-- and there's other protocol available on : https://knot-resolver.readthedocs.io/en/stable/config-network-forwarding.html
|
|
{'9.9.9.9', hostname='dns.quad9.net'},
|
|
{'2620:fe::fe', hostname='dns.quad9.net'},
|
|
})
|
|
))
|
|
|