Skip to content

Instantly share code, notes, and snippets.

@blackstar257
Forked from nomaster/config.boot
Created April 25, 2020 06:33
Show Gist options
  • Save blackstar257/77314016e442c7dc9f0a5873314f9af2 to your computer and use it in GitHub Desktop.
Save blackstar257/77314016e442c7dc9f0a5873314f9af2 to your computer and use it in GitHub Desktop.
EdgeRouter: DNS forwarding to CloudFlare with DNSSEC
set service dns forwarding name-server 1.1.1.1
set service dns forwarding name-server 1.0.0.1
set service dns forwarding name-server '2606:4700:4700::1111'
set service dns forwarding name-server '2606:4700:4700::1001'
set service dns forwarding options dnssec
set service dns forwarding options trust-anchor=.,19036,8,2,49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5
set service dns forwarding options trust-anchor=.,20326,8,2,E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D
set service dns forwarding options dnssec-check-unsigned
set service dns forwarding options dnssec-timestamp=/config/dnsmasq/dnsmasq.time
@blackstar257
Copy link
Author

sudo mkdir /config/dnsmasq
sudo chown dnsmasq:nogroup /config/dnsmasq

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment