# DNS security, anonymity, and Pi-hole: what are the options?

**URL:** https://discourse.pi-hole.net/t/dns-security-anonymity-and-pi-hole-what-are-the-options/13984
**Category:** General
**Created:** [October 26, 2018, 10:13am UTC](https://discourse.pi-hole.net/t/dns-security-anonymity-and-pi-hole-what-are-the-options/13984 "2018-10-26T10:13:05Z")
**Posts on this page:** 1
**Showing post:** 8

<div class="post-metadata">

### Author: ![ampfinger](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/ampfinger/32/29115_2.png) [@ampfinger](https://discourse.pi-hole.net/u/ampfinger)
#### Post date: [October 28, 2018, 5:48pm UTC](https://discourse.pi-hole.net/t/dns-security-anonymity-and-pi-hole-what-are-the-options/13984/8 "2018-10-28T17:48:07Z")

</div>

First of all, you need a newer unbound version (version 1.7.0 and newer).  
Then define an auth zone with some root server and where to put the zonefile.

Example of mine:

```auto
auth-zone:
name: "."
master: f.root-servers.net
master: k.root-servers.net
master: l.root-servers.net
master: j.root-servers.net
fallback-enabled: yes
for-downstream: no
for-upstream: yes
zonefile: "/var/lib/unbound/root.zone"

```

Restart unbound and there you go 🙂

---

_[View the full topic](https://discourse.pi-hole.net/t/dns-security-anonymity-and-pi-hole-what-are-the-options/13984)._