I would like to have an encrypted DNS queries + a DNS Cache + Domain Name System Security Extensions (DNSSEC) .
I used this bash script to install DNSCrypt and I choosed to use dnscrypt.eu servers :
DNSCrypt.eu (no logs) Holland Server address: 220.127.116.11:443 Provider name 2.dnscrypt-cert.dnscrypt.eu Public key 67C0:0F2C:21C5:5481:45DD:7CB4:6A27:1AF2:EB96:9931:40A3:09B6:2B8D:1653:1185:9C66
I installed (
apt-get install unbound ) Unbound and my unbound.conf file contains :
# # See the unbound.conf(5) man page. # # See /usr/share/doc/unbound/examples/unbound.conf for a commented # reference config file. server: # The following line will configure unbound to perform cryptographic # DNSSEC validation using the root trust anchor. auto-trust-anchor-file: "/var/lib/unbound/root.key" server: verbosity: 1 num-threads: 4 interface: 0.0.0.0 do-ip4: yes do-udp: yes do-tcp: yes access-control: 192.168.0.0/24 allow do-not-query-localhost: no chroot: "" logfile: "/var/log/unbound.log" use-syslog: no hide-identity: yes hide-version: yes harden-glue: yes harden-dnssec-stripped: yes use-caps-for-id: yes private-domain: "localhost" local-zone: "localhost." static local-data: "freebox.localhost. IN A 192.168.0.254" local-data-ptr: "192.168.0.254 freebox.localhost" python: remote-control: forward-zone: name: "." forward-addr: 127.0.0.1@40
Like you see, I added this line to activate DNSSEC :
server: # The following line will configure unbound to perform cryptographic # DNSSEC validation using the root trust anchor. auto-trust-anchor-file: "/var/lib/unbound/root.key"
Now, when I enter :
sudo service unbound start
This is the error that I get :
* Restarting recursive DNS server unbound  unbound[8878:0] error: bind: address already in use  unbound[8878:0] fatal error: could not open ports
My question is of course about the error ! Also, is it useful to use DNSSEC in an ordinary laptop (not a DNS server) or it is just useful for DNS Servers ?