Unbound vs. Dnsmasq - OPNsense
forum.opnsense.org › indexAug 02, 2017 · Unbound, like Bind is a full DNS resolver which can talk directly to the DNS root servers. Dnsmasq is only a forwarder, it will ask your nearest DNS (mostly the ISP's servers or Google). Thus, a forwarders answers are an implicit trust in the DNS server chain that you are using.
Unbound vs. Dnsmasq - OPNsense
https://forum.opnsense.org/index.php?topic=5623.003.08.2017 · Unbound, like Bind is a full DNS resolver which can talk directly to the DNS root servers. Dnsmasq is only a forwarder, it will ask your nearest DNS (mostly the ISP's servers or Google). Thus, a forwarders answers are an implicit trust in the DNS server chain that you are using. It's in that sense less secure that it may not return what the ...