PiVPN wireguard and unbound (NO Pihole) - DNS provider problem?

General Discussion
1

I’d like to have PiVPN installed alongside Unbound, no need for Pihole this time.

I already had unbound installed through dietpi-software with default config, working fine. I then installed PiVPN (again through dietpi-software), and got to the section about choosing DNS Provider, the correct option appears to be…

'In case you have a local resolver running, ie unbound, select ''PiVPN-local-DNS and make sure your resolver is listing on ''10.59.52.1'', allowing requests from ''10.59.52.0/24''. '

I don’t know how do the resolver listing and requests part. I just went ahead anyway and the tunnel connects but only ipv6, no ipv4 .

I suspect it’s because I don’t know how to configure the ‘resolver’? Or just that I don’t know what I’m doing, but being aware a mis-configured tunnel can be a security risk, I want to get it right.

I also have on another Raspberry Pi with all three of the following , PiVPN, unbound and pihole, in that case the install notes are easy to follow and no issues.

Can anyone point me in the right direction for this particular setup please? Searching for a few days and not getting anywhere.

IMG_20231023_151412
IMG_20231023_1514121920×1442 151 KB

2

Simply choose PiVPN local DNS. Unbound is working same away as Pihole.

3

Thank you, that’s what did, tunnel comes up, but no ipv4 (only ipv6).

Might be an unrelated issue then?

4

IPv4 and IPv6 has nothing to do with Unbound. Usually this depends how you configure VPN or what is supported by your ISP.

5

I ran pivpn -d and the self check found [ERR] Iptables MASQUERADE rule is not set, attempt fix now? [Y/n] Y

Once it was fixed ipv4 and ipv6 back up on the tunnel.

So this was the solution and all working now.