I recently learned that the OISD list exists and wanted to configure the recursive resolver (Unbound) in my home network to use it. This post relates to my Unbound deployment on OpenBSD, but I’m sure it can be easily adapted to other platforms.

The OISD folks helpfully provide a pre-generated Unbound configuration but, being paranoid, I’m not going to blindly start using that, and also I would like to whitelist some things. Awk seemed like a reasonable tool to postprocess the configuration.