default local DNS caching name server

[Paul Wouters]

On Sun, 13 Jul 2014, quickbooks office wrote:

> DNS over SSL does NOT work - I get no connectivity whatsoever after
> following the below steps. Tracking bug at
> https://bugzilla.redhat.com/show_bug.cgi?id=1119050
>
> Can you please tell me what am I doing wrong?

There seems to be some regression with unbound causing packets to go out
on port 53 instead of 443 when enabling ssl-upstream. I'm investigating
and will run a bisect.

btw to test unbound without using firewall rules of dnssec-trigger, use:

 	sudo unbound-control forward_add . 80.239.156.220
 	sudo unbound-control set_option ssl-upstream: yes

This is basically what dnssec-trigger does in the fallback case.

Paul