<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Dns on</title><link>https://jslee.dev/tags/dns/</link><description>Recent content in Dns on</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Sun, 21 Jun 2026 11:50:00 +1000</lastBuildDate><atom:link href="https://jslee.dev/tags/dns/index.xml" rel="self" type="application/rss+xml"/><item><title>Sanitised OISD and Unbound</title><link>https://jslee.dev/posts/unbound-oisd-sanitised/</link><pubDate>Sun, 21 Jun 2026 11:50:00 +1000</pubDate><guid>https://jslee.dev/posts/unbound-oisd-sanitised/</guid><description>&lt;p&gt;I recently learned that the &lt;a href="https://oisd.nl/"&gt;OISD list&lt;/a&gt; exists and wanted
to configure the recursive resolver (Unbound) in my home network to use
it. This post relates to my Unbound deployment on OpenBSD, but I&amp;rsquo;m sure
it can be easily adapted to other platforms.&lt;/p&gt;
&lt;p&gt;The OISD folks helpfully provide a &lt;a href="https://big.oisd.nl/unbound"&gt;pre-generated Unbound configuration&lt;/a&gt;
but, being paranoid, I&amp;rsquo;m not going to blindly start using that, and also I
would like to whitelist some things. Awk seemed like a reasonable tool to
postprocess the configuration.&lt;/p&gt;</description></item></channel></rss>