# Установка unbound

```shell
sudo apt install unbound
wget https://www.internic.net/domain/named.root -qO- | sudo tee /var/lib/unbound/root.hints
sudo nano /etc/unbound/unbound.conf.d/main.conf
```

> server:  
> logfile: "/var/log/unbound/unbound.log"  
> verbosity: 1
> 
> interface: 0.0.0.0  
> port: 53
> 
> do-ip4: yes  
> do-udp: yes  
> do-tcp: yes  
> do-ip6: no
> 
> prefer-ip6: no
> 
> \#root-hints: "/var/lib/unbound/root.hints"
> 
> harden-glue: yes  
> harden-dnssec-stripped: yes
> 
> hide-identity: yes  
> hide-version: yes
> 
> use-caps-for-id: no
> 
> edns-buffer-size: 1472
> 
> prefetch: yes
> 
> num-threads: 1
> 
> so-rcvbuf: 1m
> 
> private-address: 192.168.0.0/16  
> private-address: 169.254.0.0/16  
> private-address: 172.16.0.0/12  
> private-address: 10.0.0.0/8  
> private-address: fd00::/8  
> private-address: fe80::/10
> 
> access-control: 192.168.0.0/16 allow  
> access-control: 169.254.0.0/16 allow  
> access-control: 172.16.0.0/12 allow  
> access-control: 10.0.0.0/8 allow  
> access-control: 127.0.0.1/24 allow

```shell
sudo mkdir -p /var/log/unbound
sudo touch /var/log/unbound/unbound.log
sudo chown unbound /var/log/unbound/unbound.log
sudo systemctl disable systemd-resolved --now
sudo systemctl restart unbound
```