Instal DNS Unbound di Windows

1. Download dulu unboundnya di websitenya lsg. sampe saat tulisan ini gw publish versi unbound yang terbaru adalah 1.4.13 dan udah dicompile jadi .exe (tinggal pake). Download unbound latest dimari 
2. lalu edit file service.conf di C:\Program Files\unbound dengan menggunakan notepad (rekomendasi gw make notepad++)
3. ini settingan gw


# Unbound configuration file on windows.
# See example.conf for more settings and syntax
server: auto-trust-anchor-file: "C:\Program Files\Unbound\root.key"
verbosity: 1
statistics-interval: 120
num-threads: 1
interface: 0.0.0.0
outgoing-range: 512
num-queries-per-thread: 1024
msg-cache-size: 16m
rrset-cache-size: 32m
msg-cache-slabs: 4
rrset-cache-slabs: 4
cache-max-ttl: 86400
infra-host-ttl: 60
infra-lame-ttl: 120
infra-cache-numhosts: 10000
infra-cache-lame-size: 10k
do-ip4: yes
do-ip6: no
do-udp: yes
do-tcp: yes
do-daemonize: yes
#access-control: 0.0.0.0/0 allow
access-control: 192.168.100.0/27 allow
access-control: 172.16.0.0/12 allow
access-control: 10.0.0.0/8 allow
access-control: 127.0.0.0/8 allow
#access-control: 0.0.0.0/0 refuse
#use-syslog: yes
logfile: ""
use-syslog: no
identity: "DNS"
version: "1.4"
hide-identity: yes
hide-version: yes
harden-glue: yes
do-not-query-address: 127.0.0.1/8
do-not-query-localhost: yes
module-config: "iterator"
#zone localhost
local-zone: "localhost." static
local-data: "localhost. 10800 IN NS localhost."
local-data: "localhost. 10800 IN SOA localhost. nobody.invalid. 1 3600 1200 604800 10800"
local-data: "localhost. 10800 IN A 127.0.0.1"
local-zone: "127.in-addr.arpa." static
local-data: "127.in-addr.arpa. 10800 IN NS localhost."
local-data: "127.in-addr.arpa. 10800 IN SOA localhost. nobody.invalid. 2 3600 1200 604800 10800"
local-data: "1.0.0.127.in-addr.arpa. 10800 IN PTR localhost."
forward-zone:
name: "."
forward-addr: 8.8.8.8
forward-addr: 8.8.4.4
remote-control:
control-enable: yes
control-interface: 127.0.0.1
control-port: 953
server-key-file: "C:\Program Files\Unbound\unbound_server.key"
server-cert-file: "C:\Program Files\Unbound\unbound_server.pem"
control-key-file: "C:\Program Files\Unbound\unbound_control.key"
control-cert-file: "C:\Program Files\Unbound\unbound_control.pem"


4. jalankan deh unboundnya lewat service management windows pasti lsg error
untuk mengatasinya perlu 4 file yang di generate khusus oleh sistem *nix
dibawah ini dah gw sertakan 4 file tersebut beserta isinya
silahkan dibuat sendiri melalui notepad lalu save ke all files


unbound_server.key
-----BEGIN RSA PRIVATE KEY-----
MIIDfAIBAAKBwQDdon3fs4pOZ3DYbaz1ZqeMpGFnSTnQtVojg9OVgqoKtBmh FhSf
xxUlC4wAIMrdyLMcLQupZq/+dPfTEPwhU/4tgbkyROxP4TKlohnWvLh2WWBA+M/i
ckB+e61ZpNkyuvqN4qwJJHK1YGZ3ENE/JjZlQhxx/i1VDU06Tv+fEPyWbr9mzQSD
50F4ahV/1uvVEFXxH23jhWH6rW65WbaV81r8/i7gtG1fRVLHHO70rIUwfPd5s3Zu
W8JOvSi/X+KhNDsCAwEAAQKBwFGJK+GWPXVmnJ8iihSltVIKT0MeL0TW0thp8Pb5
4PCbHSqj4uZ86Qx92P1bEwbQhQQCll21x11HTry5bOgd7E51gNo7fOxOHsHM htD3
EK2JZ92/K0tVWOCvQzDNcpI1MrRudnYJF7GIdXRYjDfH/doJFYi8cw4RI7l9sSyq
FrAlcY1Gz8JbQzmEvG2ydhGZGIWMOHT2bfxMalTZZfV9wJvC18dmQeZDFSv0 qaMv
yxZO1ADi1osk6B6gkJN7aHk+wQJhAPqxfCgRpuEqgSQlBEA0xje8liVI1u5m NDbt
HOvI3gs2JaLVK8Bzs/+SdA7jDgoeSomdye1u6e6acI8NFv/w4rK4tk1RVFB/4CQl
S9hmQS74OcY2ktn7gdDJHij4XXBNkQJhAOJTiZMkXHtg87EwDBsUHtf5GHKd YrDv
J1c/4TBTvgYR6W9x6+fsid/2+bxlCRejNxnm9RdrO6TtOoEoTR38oQE0QORxzPat
4cDpb0D0gQ7wyVdrvIFrBsGampEuNGxvCwJgFMs7/SbZrLuV0qWvYJQADQd7fMQ5
77RSiGvKhlQ29r8bCBKeemwedghzz/hNZdF1ZUzNPwCALuZoh7USP1B/vUtM88TX
NYYl1VmynNR+e6LjR+mm7KXL8sF72vIe7f3BAmBCWbUyYu2N6h1nK6vQ4HQu YsNt
DoDZWDNTW9HbxiEmTGgAGQjM5EaDVzddqM0ileHYgSIHLJO+xSFqrfL1wJM+ 9B+2
GTq6cr2FPao1A7k2NRcBvv7zffnsFjQMLdyGkYMCYQC/bcicNenQs81/4aOtda9P
0g3ktdcIxt+RFWvVGTWM+VTK066KKgeGyDS1zFP5P6/m3jhBgJOWabUmE68iqE+4
PQHqp1cHLjDYM6lsRDDiKf083+uMCBNBxNg3pYAhR50=
-----END RSA PRIVATE KEY-----


unbound_server.pem

-----BEGIN CERTIFICATE-----
MIICGzCCAUQCCQD6VQKbWqdNgDANBgkqhkiG9w0BAQsFADASMRAwDgYDVQQD Ewd1
bmJvdW5kMB4XDTEwMTAyMjA1MDAzNloXDTMwMDcwOTA1MDAzNlowEjEQMA4G A1UE
AxMHdW5ib3VuZDCB3zANBgkqhkiG9w0BAQEFAAOBzQAwgckCgcEA3aJ937OK Tmdw
2G2s9WanjKRhZ0k50LVaI4PTlYKqCrQZoRYUn8cVJQuMACDK3cizHC0LqWav/nT3
0xD8IVP+LYG5MkTsT+EypaIZ1ry4dllgQPjP4nJAfnutWaTZMrr6jeKsCSRy tWBm
dxDRPyY2ZUIccf4tVQ1NOk7/nxD8lm6/Zs0Eg+dBeGoVf9br1RBV8R9t44Vh+q1u
uVm2lfNa/P4u4LRtX0VSxxzu9KyFMHz3ebN2blvCTr0ov1/ioTQ7AgMBAAEwDQYJ
KoZIhvcNAQELBQADgcEAgLdGAxioFn8U+0hY5jARn+AiriKk/sSarHRt9ha+k+JP
EJtqw37/eTRI7dR4GAh4FJ8AE7unzNEnqCFEh+t3SbUYzcvcMNH+p355zjXWuerA
RL2XXcGJbUClHGrUffG3w2YtyEkqqdRAssW6J1TGr34ubG9lgbSO9r5C8QIl TuCA
KmkfC3K4xzVH9dg34HK+GvYxjD3vnTeC0tuA/999H3A5Qp3Y8m/8vzaJ9SGx0KXN
qPCzKeaco7q+XQLl/JPs
-----END CERTIFICATE-----

unbound_control.key

-----BEGIN RSA PRIVATE KEY-----
MIIDfQIBAAKBwQDAjkn5tcJfRSfvM5M3vwR6E+RK+9/iYblBW9PtzcIh7QL+vpWa
IbHa8wd5vsUtbpBzdLetchFVRjdO5d4BCIHHppX2J+yhyry+f69fmc83lUYw Wb45
NrPt7ekr12qbWY4iXMtowe+7/LYqwby0Z3DH07OvL6hdWaPwNdfqL6ztNX8w+cJn
yjnWLYYC/osXHv7cr/jLQCebLjKvJ9kYbiIXpIFFJ2wCdjUUAiP1rfrxFwPKeJoK
Wa4vHferdXUBZXECAwEAAQKBwAVTql47Ff52tk0auybepOwPotAkOaRUmcBi HvHE
MGup19xeP1s9NWNeN8W5blD8bwiSoQYuUqZuQ9dt6n9S0exJAnsFzbkIF8KZ W6uk
YKQkAAYUZXvFtKKPY1TwJ6XWi1i4/N6XPjJEJkn0TVhb1AThJLtrUa7YR+WWhIlf
iLEgj3UsHcvPmDZh3egjoDMCIwftAEoPWXpBVl/9Xav/6SNbLkTZK6LXZDI7gdbx
Au/WX3TIMwMGub58povZgEC9sQJhAPKF411du4dEmppVe6xFaMRtqpxCUvZR00s b
/j/pudzbpsYI8J32qjc0NtEnTQLHgciwdNbavrsr3wNtUL/OCA+8UsRC5bZS81/n
j2GF75Ztq/BczxI+2zgNw2WNApFsZQJhAMtBkmTl25mhS7MTQRRkoCErWZ7+H0x9
VPhaFGu16e791wsf2CcbJbjxpMM0P0K/+QuFfHZadhALRloCT6wijaNTaEBNFlJ8
6jYNTBQbWnLnkm3a3mxZ+VeXDD3+dcrGHQJhAJvjsAg9zeLfGDmIJRzQ6M0K aRZU
E5u9cQHglodip1Pt5L9605/WBAfEClBa4Meeki/8LL5GkT8irhE33SXNO6VRuinp
jlqp60KER8e6Hg0lpdW08m2Z9bOMNUM7ZqEveQJhAIuXOARFfIDRLp0IvyxT Q0ok
bINuAW7VsJJzwwyKPeQdvx9rulZ5JXoTstVBP6UHFPIdtfHOhMDWDXXpmnAc tuuR
b8qhZpA2K9/9V9+DPaYmdgEuTI1baYwHN6gn5xvg3QJgAK5s27dNEO4KYGENxJFs
hSFy9IJSw0vDDE/f8AsbN8yZ1YUsTAEo6J05e8eQG89OK6e5WwVDowgSKhYuLiAM
YmHnZq3IGgav8+5SAZrKVfFYH0sNlNgyhy+ZT9F0kp34
-----END RSA PRIVATE KEY-----


unbound_control.pem

-----BEGIN CERTIFICATE-----
MIICIzCCAUwCCQDl52baCpb0cDANBgkqhkiG9w0BAQsFADASMRAwDgYDVQQD Ewd1
bmJvdW5kMB4XDTEwMTAyMjA1MDAzNloXDTMwMDcwOTA1MDAzNlowGjEYMBYG A1UE
AxMPdW5ib3VuZC1jb250cm9sMIHfMA0GCSqGSIb3DQEBAQUAA4HNADCByQKB wQDA
jkn5tcJfRSfvM5M3vwR6E+RK+9/iYblBW9PtzcIh7QL+vpWaIbHa8wd5vsUtbpBz
dLetchFVRjdO5d4BCIHHppX2J+yhyry+f69fmc83lUYwWb45NrPt7ekr12qb WY4i
XMtowe+7/LYqwby0Z3DH07OvL6hdWaPwNdfqL6ztNX8w+cJnyjnWLYYC/osXHv7c
r/jLQCebLjKvJ9kYbiIXpIFFJ2wCdjUUAiP1rfrxFwPKeJoKWa4vHferdXUBZX EC
AwEAATANBgkqhkiG9w0BAQsFAAOBwQCI+zJPiX9PyajVLYVJoVPwF+oq3xOE lhgj
oVNNr9mx5QSPgIuvES14Kw9Bxfof49BdPK7IGMFGMWfkSj/MwGEfcceeklIsct/b
r72mL6//wClTiH2U+PPVah42XUGPawKc7f94NcOowJgyaAidTo1MXm0h/1rba2bv
0VU0/9ICsVV87Q+aIkkRjDNXjySnJaO6ECL4o3qFTO0adwTo72l+AsoWksDJy2PM
ivSmj1mxP1RA/M3lNmFCCqGSR9avQDg=
-----END CERTIFICATE----- 
silahkan jadikan satu di folder unbound 
bagi yang males ato takut salah dah gw jadikan 1 folder keempat file diatas silahkan download dimari

klo udah silahkan restart unboundnya di service management dengan klik start menu -> run lalu ketik services.msc cari dah unboundnya disana & tinggal klik restart

NOTE :

  • DNS diatas blm ditambahkan dengan dns nawala 180.131.144.144; 180.131.145.145, silakan tambahkan sendiri
  • jika ingin mengganti DNS maupun menambah silahkan merubah atau menambah di bagian forwarder zone(cek yg gw bold)
  • untuk melakukan pengecekan silahkan melakukan dig,klo blm ada dig silahkan liat trik selanjutnya disini.
  • bagi pemakai squid silahkan ditambahkan confignya dengan :
dns_nameservers 127.0.0.1

Pass nya : sumber-teknology

0 Response to "Instal DNS Unbound di Windows"

Post a Comment