# forwarder setup ## BIND If you already run a local DNS server, you can tell it to query the dn42 anycast servers for the relevant domains by adding the following to /etc/bind/named.conf.local ``` zone "dn42" { type forward; forwarders { 172.22.0.53; }; }; zone "22.172.in-addr.arpa" { type forward; forwarders { 172.22.0.53; }; }; zone "23.172.in-addr.arpa" { type forward; forwarders { 172.22.0.53; }; }; ``` ## dnsmasq If you are running dnsmasq under openwrt, you just have to add ``` config dnsmasq option boguspriv '0' option rebind_protection '1' list rebind_domain 'dn42' list server '/dn42/172.22.0.53' list server '/22.172.in-addr.arpa/172.22.0.53' list server '/23.172.in-addr.arpa/172.22.0.53' ``` to /etc/config/dhcp and run /etc/init.d/dnsmasq restart. After that you are able to resolve .dn42 with the anycast DNS-Server, while your normal requests go to your standard DNS-resolver. for normal dnsmasq use ``` server=/dn42/172.22.0.53 server=/22.172.in-addr.arpa/172.22.0.53 ``` in dnsmasq.conf ## PowerDNS recursor Add this to /etc/powerdns/recursor.conf (at least in Debian) ``` dont-query=127.0.0.0/8, 10.0.0.0/8, 192.168.0.0/16, ::1/128, fe80::/10 forward-zones= dn42=172.22.0.53,22.172.in-addr.arpa=172.22.0.53,23.172.in-addr.arpa=172.22.0.53 ``` ## MaraDNS Put this in your mararc: ``` ipv4_alias["dn42_root"] = "172.22.0.53" root_servers["dn42."] = "dn42_root" root_servers["22.172.in-addr.arpa."] = "dn42_root" root_servers["23.172.in-addr.arpa."] = "dn42_root" ``` ## Unbound unbound.conf for 172.22.0.53 ``` server: interface: 172.22.0.53@53 access-control: 0.0.0.0/0 allow access-control: ::0/0 allow local-zone: "22.172.in-addr.arpa." nodefault local-zone: "23.172.in-addr.arpa." nodefault local-zone: "d.f.ip6.arpa." nodefault stub-zone: name: "dn42" stub-prime: yes stub-addr: 172.22.119.139 stub-addr: 172.22.119.129 stub-zone: name: "22.172.in-addr.arpa" stub-prime: yes stub-addr: 172.22.119.139 stub-addr: 172.22.119.129 stub-zone: name: "23.172.in-addr.arpa" stub-prime: yes stub-addr: 172.22.119.139 stub-addr: 172.22.119.129 stub-zone: name: "d.f.ip6.arpa" stub-prime: yes stub-addr: 172.22.119.139 stub-addr: 172.22.119.129 stub-zone: name: "ffhh" stub-prime: yes stub-addr: 10.112.1.1 stub-addr: 10.112.14.1 stub-zone: name: "ffhl" stub-prime: yes stub-addr: 10.130.10.1 stub-addr: 10.130.12.1 stub-addr: 10.130.14.1 stub-zone: name: "ffc" stub-prime: yes stub-addr: 10.8.6.6 stub-zone: name: "rzl" stub-prime: yes stub-addr: 172.22.36.1 ```