{{#DNS_SCOPE_SUMMARY}}

DNS

{{DNS_SCOPE_COUNT}}

Each routing domain has its own resolver. Open a domain to set it up or change it.

{{#ERROR}} {{/ERROR}} {{#FLASH}} {{/FLASH}}

{{#DNS_SCOPE_ROWS}} {{/DNS_SCOPE_ROWS}}

Routing domain	Mode	Networks	Upstream	Resolution	Drift	Instance
{{S_LABEL}}	{{S_MODE}}	{{S_NETWORKS}}	{{#S_HAS_UPSTREAM}}{{S_UPSTREAM}}{{/S_HAS_UPSTREAM}}{{^S_HAS_UPSTREAM}}—{{/S_HAS_UPSTREAM}}	{{#S_HAS_HEALTH}}{{S_HEALTH}}{{/S_HAS_HEALTH}}{{^S_HAS_HEALTH}}—{{/S_HAS_HEALTH}}	{{#S_DRIFT}}drift{{/S_DRIFT}}{{#S_DRIFT_UNKNOWN}}unknown{{/S_DRIFT_UNKNOWN}}{{^S_DRIFT}}{{^S_DRIFT_UNKNOWN}}—{{/S_DRIFT_UNKNOWN}}{{/S_DRIFT}}	{{S_STATE}}	{{#S_KNOWN}}Open{{/S_KNOWN}}{{^S_KNOWN}}domain gone; remove from the console{{/S_KNOWN}}

{{#DNS_SCOPE_WALKED}}Instance state from the last walk, {{DNS_SCOPE_WALK_AGE}} s ago.{{/DNS_SCOPE_WALKED}}{{^DNS_SCOPE_WALKED}}Instance state is not known yet: the first walk has not run.{{/DNS_SCOPE_WALKED}}

{{/DNS_SCOPE_SUMMARY}} {{^DNS_SCOPE_SUMMARY}}

DNS

{{#DNS_SCOPED}}

Resolver for routing domain {{DNS_SCOPE_LABEL}}

{{/DNS_SCOPED}}

{{STATUS_LINE}}

{{STATUS_SUB}}

{{#DRIFT_BADGE}}{{#B_UNSAVED}}Unsaved edits{{/B_UNSAVED}}{{#B_DRIFT}}{{B_LABEL}}{{/B_DRIFT}}{{#B_ERROR}}Drift state unknown{{/B_ERROR}}{{#B_OK}}In sync{{/B_OK}}{{/DRIFT_BADGE}}

{{#ERROR}} {{/ERROR}} {{#FLASH}} {{/FLASH}} {{#PENDING}}

Confirm DNS change

A live DNS change by {{PENDING_ACTOR}} reverts in {{PENDING_REMAINING}} s unless you keep it.

{{#PENDING_REVERT_FAILED}}

Automatic revert failed. The change keeps retrying in the background; if it persists, restart the DNS service from the console.

{{/PENDING_REVERT_FAILED}} {{#WRITE}}

Keep this configuration

Revert now

{{/WRITE}}

{{/PENDING}} {{#UPSTREAM_DRIFT}}

Upstream DNS changed (lease renewal). Refresh re-applies the current lease's servers without changing your configuration.

{{#WRITE}}{{^DNS_SCOPED}}

Refresh upstreams

{{/DNS_SCOPED}}{{/WRITE}}

{{/UPSTREAM_DRIFT}}

{{^DNS_SCOPED}}{{/DNS_SCOPED}}{{#DNS_SCOPED}}{{/DNS_SCOPED}} {{#WRITE}}{{/WRITE}}

Off Devices use whatever DNS their network hands them. Resolver recommended Answers DNS for your networks and caches the replies. DNS server A resolver plus local names, split DNS, blocking and tuning.

{{#ADOPTION}}{{^DNS_SCOPED}}

This router already has an Unbound configuration. Applying replaces it; you will be asked to confirm at apply.

Show the current unbound.conf

{{LIVE_PREVIEW}} {{#LIVE_PREVIEW_TRUNCATED}}preview truncated{{/LIVE_PREVIEW_TRUNCATED}}

{{/DNS_SCOPED}}{{/ADOPTION}} {{#SERVER_DATA}}

Your {{SERVER_ENTRY_COUNT}} DNS server entries stay in the configuration and keep working. Choose DNS server to see and edit them.

{{/SERVER_DATA}}

Networks

{{LISTEN_ROWS}}

Upstream

{{PICK_OPTIONS}}

Encrypt lookups to the upstream (DNS over TLS) {{TLS_REASON}}

More options

Validate DNSSEC signatures recommended Resolve directly when the upstream list is empty Try the upstream first, resolve directly when it fails

Also answer clients from {{ALLOWED_CHIPS}} Add networks, one per line {{ALLOWED_CLIENTS_TEXT}}

DNS server settings

Set up as a DNS server to edit these.

Choose Resolver to lock these sections; their entries stay saved and the page reopens the way you last saved it.

Local names{{COUNT_LZ}}

{{LZ_CARDS}}

{{#WRITE}}+ Add zone{{/WRITE}} {{#WRITE}} {{/WRITE}}

Split DNS{{COUNT_SPLIT}}

{{ZONE_ROWS}}

Domain	Servers	How	Unsigned zone	Private addresses

{{#WRITE}}+ Add domain{{/WRITE}} {{#WRITE}}{{/WRITE}}

Blocking{{COUNT_BLOCK}}

Blocked domains Add domains, one per line {{BLOCK_DOMAINS_TEXT}}

Blocked lookups answer no such domain refused

Blocking reaches only devices that use this resolver; a firewall rule that sends port 53 to this router covers the rest.

Access policy{{COUNT_POLICY}}

{{ACL_ROWS}}

Network	Queries are

{{#WRITE}}+ Add network{{/WRITE}} {{#WRITE}}{{/WRITE}}

Networks to answer are the chips under Also answer clients from, above.

Tuning{{COUNT_TUNING}}

Refresh popular answers before they expire Send less of each query upstream (QNAME minimisation) Hide the server identity Hide the server version

Message cache Record cache

{{^DNS_SCOPED}} Raw tuning lines {{EXTRA_TEXT}} {{/DNS_SCOPED}}

Show the generated unbound.conf

{{RENDERED_PREVIEW}} {{#PREVIEW_TRUNCATED}}preview truncated{{/PREVIEW_TRUNCATED}}

{{#REVIEW}}

{{#REVIEW_ERROR}}

{{ERROR}}

{{/REVIEW_ERROR}}

Changes

{{#REVIEW_CHANGES}}

{{REVIEW_CHANGE_ROWS}}

{{/REVIEW_CHANGES}} {{#REVIEW_NO_CHANGES}}

No changes; applying re-writes the saved configuration.

{{/REVIEW_NO_CHANGES}}

{{REVIEW_CONSEQUENCE}}{{#CONFIG_DRIFT}} The live unbound.conf was edited outside OgmaProtect; applying overwrites it.{{/CONFIG_DRIFT}}

{{#REVIEW_ACKS}}

Needs your confirmation

{{REVIEW_ACK_ROWS}}

{{/REVIEW_ACKS}} {{^DNS_SCOPED}}

Safety net

Undo automatically after s unless I confirm the change worked

{{/DNS_SCOPED}} {{#WRITE}}

Back {{^REVIEW_REMOVE}}Apply now{{/REVIEW_REMOVE}}{{#REVIEW_REMOVE}}Remove now{{/REVIEW_REMOVE}}

{{/WRITE}}

{{/REVIEW}} {{#WRITE}}

{{BAR_TEXT}}

{{#DNS_SCOPE_REMOVE}}Remove this domain's resolver{{/DNS_SCOPE_REMOVE}} {{^DNS_SCOPED}}Validate{{/DNS_SCOPED}} Review & apply

{{/WRITE}} {{^DNS_SCOPED}}

This router's own lookups

{{ROUTER_DNS_OPTIONS}}

{{/DNS_SCOPED}}

{{#DNS_SCOPE_REMOVE}}

{{/DNS_SCOPE_REMOVE}} {{/DNS_SCOPE_SUMMARY}}