Instalasi Unbound

Instalasi Unbound

Spoiler: HOW 

1. Download dulu unboundnya di websitenya lsg. sampe saat tulisan ini gw publish versi unbound yang terbaru adalah 1.4.13 dan udah dicompile jadi .exe (tinggal pake). Download unbound latest dimari
2. lalu edit file service.conf di C:\Program Files\unbound dengan menggunakan notepad (rekomendasi gw make notepad++)
3. ini settingan gw
   
   
   Spoiler: settingan 

   
   # Unbound configuration file on windows.
   # See example.conf for more settings and syntax
   server: auto-trust-anchor-file: "C:\Program Files\Unbound\root.key"
   verbosity: 1
   statistics-interval: 120
   num-threads: 1
   interface: 0.0.0.0
   outgoing-range: 512
   num-queries-per-thread: 1024
   msg-cache-size: 16m
   rrset-cache-size: 32m
   msg-cache-slabs: 4
   rrset-cache-slabs: 4
   cache-max-ttl: 86400
   infra-host-ttl: 60
   infra-lame-ttl: 120
   infra-cache-numhosts: 10000
   infra-cache-lame-size: 10k
   do-ip4: yes
   do-ip6: no
   do-udp: yes
   do-tcp: yes
   do-daemonize: yes
   #access-control: 0.0.0.0/0 allow
   #access-control: 192.168.100.0/27 allow
   #access-control: 172.16.0.0/12 allow
   #access-control: 10.0.0.0/8 allow
   access-control: 127.0.0.0/8 allow
   #access-control: 0.0.0.0/0 refuse
   #use-syslog: yes
   logfile: ""
   use-syslog: no
   identity: "DNS"
   version: "1.4"
   hide-identity: yes
   hide-version: yes
   harden-glue: yes
   do-not-query-address: 127.0.0.1/8
   do-not-query-localhost: yes
   module-config: "iterator"
   #zone localhost
   local-zone: "localhost." static
   local-data: "localhost. 10800 IN NS localhost."
   local-data: "localhost. 10800 IN SOA localhost. nobody.invalid. 1 3600 1200 604800 10800"
   local-data: "localhost. 10800 IN A 127.0.0.1"
   local-zone: "127.in-addr.arpa." static
   local-data: "127.in-addr.arpa. 10800 IN NS localhost."
   local-data: "127.in-addr.arpa. 10800 IN SOA localhost. nobody.invalid. 2 3600 1200 604800 10800"
   local-data: "1.0.0.127.in-addr.arpa. 10800 IN PTR localhost."
   forward-zone:
   name: "."
   forward-addr: 8.8.8.8
   forward-addr: 8.8.4.4
   remote-control:
   control-enable: yes
   control-interface: 127.0.0.1
   control-port: 953
   server-key-file: "C:\Program Files\Unbound\unbound_server.key"
   server-cert-file: "C:\Program Files\Unbound\unbound_server.pem"
   control-key-file: "C:\Program Files\Unbound\unbound_control.key"
   control-cert-file: "C:\Program Files\Unbound\unbound_control.pem"
   
4. jalankan deh unboundnya lewat service management windows pasti lsg error

untuk mengatasinya perlu 4 file yang di generate khusus oleh sistem *nix

dibawah ini dah gw sertakan 4 file tersebut beserta isinya

silahkan dibuat sendiri melalui notepad lalu save ke all files

1. unbound_server.key
   
   
   Spoiler: isi filenya 

   -----BEGIN RSA PRIVATE KEY-----
   MIIDfAIBAAKBwQDdon3fs4pOZ3DYbaz1ZqeMpGFnSTnQtVojg9OVgqoKtBmh FhSf
   xxUlC4wAIMrdyLMcLQupZq/+dPfTEPwhU/4tgbkyROxP4TKlohnWvLh2WWBA+M/i
   ckB+e61ZpNkyuvqN4qwJJHK1YGZ3ENE/JjZlQhxx/i1VDU06Tv+fEPyWbr9mzQSD
   50F4ahV/1uvVEFXxH23jhWH6rW65WbaV81r8/i7gtG1fRVLHHO70rIUwfPd5s3Zu
   W8JOvSi/X+KhNDsCAwEAAQKBwFGJK+GWPXVmnJ8iihSltVIKT0MeL0TW0thp8Pb5
   4PCbHSqj4uZ86Qx92P1bEwbQhQQCll21x11HTry5bOgd7E51gNo7fOxOHsHM htD3
   EK2JZ92/K0tVWOCvQzDNcpI1MrRudnYJF7GIdXRYjDfH/doJFYi8cw4RI7l9sSyq
   FrAlcY1Gz8JbQzmEvG2ydhGZGIWMOHT2bfxMalTZZfV9wJvC18dmQeZDFSv0 qaMv
   yxZO1ADi1osk6B6gkJN7aHk+wQJhAPqxfCgRpuEqgSQlBEA0xje8liVI1u5m NDbt
   HOvI3gs2JaLVK8Bzs/+SdA7jDgoeSomdye1u6e6acI8NFv/w4rK4tk1RVFB/4CQl
   S9hmQS74OcY2ktn7gdDJHij4XXBNkQJhAOJTiZMkXHtg87EwDBsUHtf5GHKd YrDv
   J1c/4TBTvgYR6W9x6+fsid/2+bxlCRejNxnm9RdrO6TtOoEoTR38oQE0QORxzPat
   4cDpb0D0gQ7wyVdrvIFrBsGampEuNGxvCwJgFMs7/SbZrLuV0qWvYJQADQd7fMQ5
   77RSiGvKhlQ29r8bCBKeemwedghzz/hNZdF1ZUzNPwCALuZoh7USP1B/vUtM88TX
   NYYl1VmynNR+e6LjR+mm7KXL8sF72vIe7f3BAmBCWbUyYu2N6h1nK6vQ4HQu YsNt
   DoDZWDNTW9HbxiEmTGgAGQjM5EaDVzddqM0ileHYgSIHLJO+xSFqrfL1wJM+ 9B+2
   GTq6cr2FPao1A7k2NRcBvv7zffnsFjQMLdyGkYMCYQC/bcicNenQs81/4aOtda9P
   0g3ktdcIxt+RFWvVGTWM+VTK066KKgeGyDS1zFP5P6/m3jhBgJOWabUmE68iqE+4
   PQHqp1cHLjDYM6lsRDDiKf083+uMCBNBxNg3pYAhR50=
   -----END RSA PRIVATE KEY-----
   
   
2. unbound_server.pem
   
   
   Spoiler: isi filenya 

   -----BEGIN CERTIFICATE-----
   MIICGzCCAUQCCQD6VQKbWqdNgDANBgkqhkiG9w0BAQsFADASMRAwDgYDVQQD Ewd1
   bmJvdW5kMB4XDTEwMTAyMjA1MDAzNloXDTMwMDcwOTA1MDAzNlowEjEQMA4G A1UE
   AxMHdW5ib3VuZDCB3zANBgkqhkiG9w0BAQEFAAOBzQAwgckCgcEA3aJ937OK Tmdw
   2G2s9WanjKRhZ0k50LVaI4PTlYKqCrQZoRYUn8cVJQuMACDK3cizHC0LqWav/nT3
   0xD8IVP+LYG5MkTsT+EypaIZ1ry4dllgQPjP4nJAfnutWaTZMrr6jeKsCSRy tWBm
   dxDRPyY2ZUIccf4tVQ1NOk7/nxD8lm6/Zs0Eg+dBeGoVf9br1RBV8R9t44Vh+q1u
   uVm2lfNa/P4u4LRtX0VSxxzu9KyFMHz3ebN2blvCTr0ov1/ioTQ7AgMBAAEwDQYJ
   KoZIhvcNAQELBQADgcEAgLdGAxioFn8U+0hY5jARn+AiriKk/sSarHRt9ha+k+JP
   EJtqw37/eTRI7dR4GAh4FJ8AE7unzNEnqCFEh+t3SbUYzcvcMNH+p355zjXWuerA
   RL2XXcGJbUClHGrUffG3w2YtyEkqqdRAssW6J1TGr34ubG9lgbSO9r5C8QIl TuCA
   KmkfC3K4xzVH9dg34HK+GvYxjD3vnTeC0tuA/999H3A5Qp3Y8m/8vzaJ9SGx0KXN
   qPCzKeaco7q+XQLl/JPs
   -----END CERTIFICATE-----
   
   
3. unbound_control.key
   
   
   Spoiler: isi filenya 

   -----BEGIN RSA PRIVATE KEY-----
   MIIDfQIBAAKBwQDAjkn5tcJfRSfvM5M3vwR6E+RK+9/iYblBW9PtzcIh7QL+vpWa
   IbHa8wd5vsUtbpBzdLetchFVRjdO5d4BCIHHppX2J+yhyry+f69fmc83lUYw Wb45
   NrPt7ekr12qbWY4iXMtowe+7/LYqwby0Z3DH07OvL6hdWaPwNdfqL6ztNX8w+cJn
   yjnWLYYC/osXHv7cr/jLQCebLjKvJ9kYbiIXpIFFJ2wCdjUUAiP1rfrxFwPKeJoK
   Wa4vHferdXUBZXECAwEAAQKBwAVTql47Ff52tk0auybepOwPotAkOaRUmcBi HvHE
   MGup19xeP1s9NWNeN8W5blD8bwiSoQYuUqZuQ9dt6n9S0exJAnsFzbkIF8KZ W6uk
   YKQkAAYUZXvFtKKPY1TwJ6XWi1i4/N6XPjJEJkn0TVhb1AThJLtrUa7YR+WWhIlf
   iLEgj3UsHcvPmDZh3egjoDMCIwftAEoPWXpBVl/9Xav/6SNbLkTZK6LXZDI7gdbx
   Au/WX3TIMwMGub58povZgEC9sQJhAPKF411du4dEmppVe6xFaMRtqpxCUvZR00s b
   /j/pudzbpsYI8J32qjc0NtEnTQLHgciwdNbavrsr3wNtUL/OCA+8UsRC5bZS81/n
   j2GF75Ztq/BczxI+2zgNw2WNApFsZQJhAMtBkmTl25mhS7MTQRRkoCErWZ7+H0x9
   VPhaFGu16e791wsf2CcbJbjxpMM0P0K/+QuFfHZadhALRloCT6wijaNTaEBNFlJ8
   6jYNTBQbWnLnkm3a3mxZ+VeXDD3+dcrGHQJhAJvjsAg9zeLfGDmIJRzQ6M0K aRZU
   E5u9cQHglodip1Pt5L9605/WBAfEClBa4Meeki/8LL5GkT8irhE33SXNO6VRuinp
   jlqp60KER8e6Hg0lpdW08m2Z9bOMNUM7ZqEveQJhAIuXOARFfIDRLp0IvyxT Q0ok
   bINuAW7VsJJzwwyKPeQdvx9rulZ5JXoTstVBP6UHFPIdtfHOhMDWDXXpmnAc tuuR
   b8qhZpA2K9/9V9+DPaYmdgEuTI1baYwHN6gn5xvg3QJgAK5s27dNEO4KYGENxJFs
   hSFy9IJSw0vDDE/f8AsbN8yZ1YUsTAEo6J05e8eQG89OK6e5WwVDowgSKhYuLiAM
   YmHnZq3IGgav8+5SAZrKVfFYH0sNlNgyhy+ZT9F0kp34
   -----END RSA PRIVATE KEY-----
4. unbound_control.pem
   
   
   Spoiler: isi filenya 

   -----BEGIN CERTIFICATE-----
   MIICIzCCAUwCCQDl52baCpb0cDANBgkqhkiG9w0BAQsFADASMRAwDgYDVQQD Ewd1
   bmJvdW5kMB4XDTEwMTAyMjA1MDAzNloXDTMwMDcwOTA1MDAzNlowGjEYMBYG A1UE
   AxMPdW5ib3VuZC1jb250cm9sMIHfMA0GCSqGSIb3DQEBAQUAA4HNADCByQKB wQDA
   jkn5tcJfRSfvM5M3vwR6E+RK+9/iYblBW9PtzcIh7QL+vpWaIbHa8wd5vsUtbpBz
   dLetchFVRjdO5d4BCIHHppX2J+yhyry+f69fmc83lUYwWb45NrPt7ekr12qb WY4i
   XMtowe+7/LYqwby0Z3DH07OvL6hdWaPwNdfqL6ztNX8w+cJnyjnWLYYC/osXHv7c
   r/jLQCebLjKvJ9kYbiIXpIFFJ2wCdjUUAiP1rfrxFwPKeJoKWa4vHferdXUBZX EC
   AwEAATANBgkqhkiG9w0BAQsFAAOBwQCI+zJPiX9PyajVLYVJoVPwF+oq3xOE lhgj
   oVNNr9mx5QSPgIuvES14Kw9Bxfof49BdPK7IGMFGMWfkSj/MwGEfcceeklIsct/b
   r72mL6//wClTiH2U+PPVah42XUGPawKc7f94NcOowJgyaAidTo1MXm0h/1rba2bv
   0VU0/9ICsVV87Q+aIkkRjDNXjySnJaO6ECL4o3qFTO0adwTo72l+AsoWksDJy2PM
   ivSmj1mxP1RA/M3lNmFCCqGSR9avQDg=
   -----END CERTIFICATE-----

silahkan jadikan satu di folder unbound

klo udah lakukan pengecekan di unboundnya melalui CMD di

Code:

"c:\Program Files\Unbound\unbound-checkconf.exe"

klo misalnya hasilnya no error berarti dah beres klo misal ada error akan diberitahu cluenya.




bagi yang males ato takut salah dah gw jadikan 1 folder keempat file diatas silahkan download dimari atau dimari, kalo mau link lokal bisa kemari

klo udah silahkan restart unboundnya di service management dengan klik start menu -> run lalu ketik services.msc cari dah unboundnya disana & tinggal klik restart

NOTE :

• DNS diatas blm ditambahkan dengan dns nawala 180.131.144.144; 180.131.145.145, silakan tambahkan sendiri
• jika ingin mengganti DNS maupun menambah silahkan merubah atau menambah di bagian forwarder zone(cek yg gw bold)
• untuk melakukan pengecekan silahkan melakukan dig,klo blm ada dig silahkan liat trik selanjutnya disini.
• bagi pemakai squid silahkan ditambahkan confignya dengan :
• Code:

  dns_nameservers 127.0.0.1

• Tested under Windows XP, Windows 7