# Unbound is not forwarding source address

**URL:** <https://discourse.pi-hole.net/t/unbound-is-not-forwarding-source-address/57740>\
**Category:** Community Help\
**Created:** [September 8, 2022, 9:24pm UTC](https://discourse.pi-hole.net/t/unbound-is-not-forwarding-source-address/57740 "2022-09-08T21:24:29Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![questiondude](https://discourse-cdn.pi-hole.net/letter_avatar_proxy/v4/letter/q/ecccb3/32.png) [@questiondude](https://discourse.pi-hole.net/u/questiondude)\
**Post date:** [September 8, 2022, 9:24pm UTC](https://discourse.pi-hole.net/t/unbound-is-not-forwarding-source-address/57740/1 "2022-09-08T21:24:29Z")

</div>

unbound is forwarding its address to pihole so pihole sees all clients as one, is there a way to change it so it forwards the real source address.

Thanks

---

<div class="post-metadata">

**Author:** ![yubiuser](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/yubiuser/32/12100_2.png) [@yubiuser](https://discourse.pi-hole.net/u/yubiuser)\
**Post date:** [September 8, 2022, 9:37pm UTC](https://discourse.pi-hole.net/t/unbound-is-not-forwarding-source-address/57740/2 "2022-09-08T21:37:19Z")

</div>

Why don't you put Pi-hole in the chain before unbound?

---

<div class="post-metadata">

**Author:** ![questiondude](https://discourse-cdn.pi-hole.net/letter_avatar_proxy/v4/letter/q/ecccb3/32.png) [@questiondude](https://discourse.pi-hole.net/u/questiondude)\
**Post date:** [September 9, 2022, 3:35am UTC](https://discourse.pi-hole.net/t/unbound-is-not-forwarding-source-address/57740/3 "2022-09-09T03:35:38Z")

</div>

unbound is my TLS front for pi-hole so i can do DoT from my phone no VPN need it.

---

<div class="post-metadata">

**Author:** ![Bucking\_Horn](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/bucking_horn/32/18719_2.png) [@Bucking\_Horn](https://discourse.pi-hole.net/u/Bucking_Horn)\
**Post date:** [September 9, 2022, 6:31am UTC](https://discourse.pi-hole.net/t/unbound-is-not-forwarding-source-address/57740/4 "2022-09-09T06:31:58Z")

</div>

You could enable [EDNS0 ECS](https://www.rfc-editor.org/rfc/rfc7871.txt) support in _`unbound`_, provided _`unbound`_ offers EDNS0 ECS support.

As this isn't a question for Pi-hole, you should consider _`unbound`_'s documentation and support:

> **[Unbound - Support](https://nlnetlabs.nl/projects/unbound/support/)**
>
> Community Unbound Support Unbound is widely used in mission critical corporate environments. This is possible because NLnet Labs is fully committed to maintaining the software, releasing new functionality and bug fixes on a regular basis. In...

---

<div class="post-metadata">

**Author:** ![yubiuser](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/yubiuser/32/12100_2.png) [@yubiuser](https://discourse.pi-hole.net/u/yubiuser)\
**Post date:** [September 9, 2022, 6:48am UTC](https://discourse.pi-hole.net/t/unbound-is-not-forwarding-source-address/57740/5 "2022-09-09T06:48:43Z")

</div>

Reading the unbound documentation it should be possible, but not easy. Pi-hole understands `EDNS(0)` information, eg. supplied subnet. (See [Support for add-subnet option from dnsmasq (ECS/EDNS0 Client Subnet)](https://discourse.pi-hole.net/t/support-for-add-subnet-option-from-dnsmasq-ecs-edns0-client-subnet/35940)).

Your unbound needs to be

> built with EDNS client subnet support

Then you can enable the modules `subnetcache validator iterator` and `send-client-subnet`

---

<div class="post-metadata">

**Author:** ![system](https://discourse.pi-hole.net/uploads/default/original/3X/7/c/7c8792f649eeb921c5d2b4c41564ffa873d9a2b8.png) [@system](https://discourse.pi-hole.net/u/system)\
**Post date:** [September 30, 2022, 6:49am UTC](https://discourse.pi-hole.net/t/unbound-is-not-forwarding-source-address/57740/6 "2022-09-30T06:49:30Z")

</div>

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.