--- foo 2010-09-22 13:18:22.518147026 -0400+++ unbound.conf 2010-09-21 20:51:27.462612544 -0400@@ -20,15 +20,14 @@ # statistics-interval: 0 # enable cumulative statistics, without clearing them after printing.- # statistics-cumulative: no- statistics-cumulative: yes+ statistics-cumulative: yes # enable extended statistics (query types, answer codes, status) # printed from unbound-control. default off, because of speed.- # extended-statistics: no+ extended-statistics: yes # number of threads to create. 1 disables threading.- num-threads: 2+ # num-threads: 1 # specify the interfaces to answer queries from by ip-address. # The default is to listen to localhost (127.0.0.1 and ::1).@@ -39,6 +38,8 @@ # interface: 192.0.2.154 # interface: 192.0.2.154@5003 # interface: 2001:DB8::5+ interface: 0.0.0.0+ interface: ::0 # enable this feature to copy the source address of queries to reply. # Socket options are not supported on all platforms. experimental. @@ -58,7 +59,6 @@ # port range that can be open simultaneously. About double the # num-queries-per-thread, or, use as many as the OS will allow you. # outgoing-range: 4096- outgoing-range: 450 # permit unbound to use this port number or port range for # making outgoing queries, using an outgoing interface.@@ -106,7 +106,7 @@ # the amount of memory to use for the RRset cache. # plain value in bytes or you can append k, m or G. default is "4Mb". - # rrset-cache-size: 8m+ # rrset-cache-size: 4m # the number of slabs to use for the RRset cache. # the number of slabs must be a power of 2.@@ -164,6 +164,7 @@ # access-control: ::0/0 refuse # access-control: ::1 allow # access-control: ::ffff:127.0.0.1 allow+ access-control: 192.168.0.0/16 allow # if given, a chroot(2) is done to the given directory. # i.e. you can chroot to the working directory, for example,@@ -217,7 +218,7 @@ # file to read root hints from. # get one from ftp://FTP.INTERNIC.NET/domain/named.cache- root-hints: "/etc/unbound/named.cache"+ # root-hints: "" # enable to not answer id.server and hostname.bind queries. # hide-identity: no@@ -260,12 +261,10 @@ # infrastructure data. Validates the replies (if possible). # Default off, because the lookups burden the server. Experimental # implementation of draft-wijngaards-dnsext-resolver-side-mitigation.- # harden-referral-path: no harden-referral-path: yes # Use 0x20-encoded random bits in the query to foil spoof attempts. # This feature is an experimental implementation of draft dns-0x20.- # use-caps-for-id: no use-caps-for-id: yes # Enforce privacy of these addresses. Strips them away from answers. @@ -313,7 +312,7 @@ # File with DLV trusted keys. Same format as trust-anchor-file. # There can be only one DLV configured, it is trusted from root down. # Download http://ftp.isc.org/www/dlv/dlv.isc.org.key- dlv-anchor-file: "/etc/unbound/dlv.isc.org.key"+ # dlv-anchor-file: "dlv.isc.org.key" # File with trusted keys for validation. Specify more than one file # with several entries, one file per entry.@@ -390,7 +389,7 @@ # the amount of memory to use for the key cache. # plain value in bytes or you can append k, m or G. default is "4Mb". - key-cache-size: 8m+ # key-cache-size: 4m # the number of slabs to use for the key cache. # the number of slabs must be a power of 2.