Source: Unbound DNS - show client IP address

[vampywiz17]

Hello there,

My working line is:

Client --> Unbound DNS (opnsense) -->ADguard Home (installed a different server)

Unbound DNS are forward all DNS traffic to ADGuard home (Query Forwarding)

I set Unbund DNS this:

server:
  client-subnet-always-forward: yes
  send-client-subnet: 0.0.0.0/0
  send-client-subnet: ::0/0

My goal to see client IP adresses on ADGuard home, not only Opnsense IP.

what i doing wrong?

[ppfeufer]

Try:

Client -> AdGuard Home -> Unbound

https://dev.to/cipherops/how-to-use-unbound-with-adguard-home-1o5n

[vampywiz17]

@ppfeufer

it is the B plan :) But technically is possible my way?

i do this similar:

https://pi-hole.net/blog/2021/09/30/pi-hole-and-opnsense/#page-content

[vampywiz17]

"If the resolver would expose the client's IP addresses I actually would consider that a bug and probable security issue."

Normally, yes. But in this case, Unbound add the information a another self hosted DNS Server (AGH).

Now i try it with dnsmasq. follow the pi-hole article step by step, but the result is same. only see opnsense IP. So seems AGH
cant not recognise that i set it in edns0.conf

[ppfeufer]

Because Unbound is querying your AGH, not the actual client …

[vampywiz17]

I see. Well now try it with pi-hole + dnsmasq and seems working well.

so this feature are not supported yet, with AGH and Unbound

[vampywiz17]

@ppfeufer

Ahh found it..

#1727

It is a reason that is not work.... It would be good that it add it in the future....