I would like to have an encrypted DNS queries + a DNS Cache + Domain Name System Security Extensions (DNSSEC) .I used this bash script to install DNSCrypt and I choosed to use dnscrypt.eu servers :DNSCrypt.eu (no logs)HollandServer address:176.56.237.171:443Provider name2.dnscrypt-cert.dnscrypt.euPublic key67C0:0F2C:21C5:5481:45DD:7CB4:6A27:1AF2:EB96:9931:40A3:09B6:2B8D:1653:1185:9C66I installed ( apt-get install unbound ) Unbound and my unbound.conf file contains : ## See the unbound.conf(5) man page.## See /usr/share/doc/unbound/examples/unbound.conf for a commented# reference config file.server:    # The following line will configure unbound to perform cryptographic    # DNSSEC validation using the root trust anchor.    auto-trust-anchor-file: /var/lib/unbound/root.keyserver:verbosity: 1num-threads: 4                                                        interface: 0.0.0.0 do-ip4: yes do-udp: yes do-tcp: yes access-control: 192.168.0.0/24 allow                 do-not-query-localhost: no chroot:         logfile: /var/log/unbound.log              use-syslog: no  hide-identity: yes hide-version: yes  harden-glue: yes harden-dnssec-stripped: yes use-caps-for-id: yes        private-domain: localhost       local-zone: localhost. static local-data: freebox.localhost. IN A 192.168.0.254                                               local-data-ptr: 192.168.0.254 freebox.localhostpython:remote-control:forward-zone:  name: .  forward-addr: 127.0.0.1@40Like you see, I added this line to activate DNSSEC :server:    # The following line will configure unbound to perform cryptographic    # DNSSEC validation using the root trust anchor.    auto-trust-anchor-file: /var/lib/unbound/root.key Now, when I enter : sudo service unbound startThis is the error that I get :      * Restarting recursive DNS server unbound[1382606879] unbound[8878:0] error: bind: address already in use[1382606879] unbound[8878:0] fatal error: could not open portsMy question is of course about the error !Also, is it useful to use DNSSEC in an ordinary laptop (not a DNS server) or it is just useful for DNS Servers ?
DNSCrypt, Unbound and DNSSEC
security;dns;cache;cryptography
Thanks @Jiri Xichtkniha and @AnthonWhen typing sudo lsof -nPi | grep \:53I can see that bind is also listening on the same port : TCP *:53 (LISTEN)I made then a modification on /etc/unbound/unbound.conf by adding this line :port:533ps :   The  port  number,  default  53, on which the server responds to queries.Another solution is to change the port of Bind from 53 to another.I hope it will help others having the same problem. 