Anyone using Unbound on a Flint 3? Question about package updates

Router VPN, DNS, Leaks
1

Hi everyone,

Has anyone here been running AdGuard Home + Unbound on a Flint 3 with stock firmware?

I currently have Pi-hole + Unbound on a Raspberry Pi and am thinking about moving DNS to the router to free up the Pi for another project.

I’m on firmware 4.10.1, and the package feed offers Unbound 1.19.3-1. Does anyone know whether GL.iNet backports security fixes to this package? I came across CVE-2026-33278 and CVE-2026-81642, but couldn’t work out whether they apply to the GL build.

Has anyone looked into this, or found a straightforward way to keep Unbound updated on stock firmware?

Would appreciate any pointers or experiences with this setup. Thanks!

2

I was using ADGH + Unbound on the F3 - I have since moved on to the F4 B6. You need to be very careful of the number of blocking list you use because the F3 has limited memory and if you use too many blocking lists you will get OOM (Out Of Memory) errors.

There is a post on how to use and update ADGH + unbound to the current version and even how to install the Beta ADGH. I will find the posts and edit this post.

(Unbound does not install properly on the F4 B6 at the moment so I am happy just using the ADGH beta.)

Here are a few useful links:-

https://forum.gl-inet.com/t/script-update-adguard-home/39398/270?u=skywizard

https://forum.gl-inet.com/t/script-update-adguard-home/39398/310?u=skywizard

https://www.reddit.com/r/GlInet/comments/1w7t6sh/adguard_home_hagezi_dns_blocklists_and_more_on_gl/

There is also a very helpful post somewhere by Charles2 on how to install and enable and use Unbound, but I cannot locate it with the searches I use. ANd I have found it:-

https://forum.gl-inet.com/t/installing-docker-and-containers-flint-3-4-9-firmware/69565/11?u=skywizard

3

Thank you! I went through the links. The updater seems to handle AdGuard Home, while Charles2 instructions install Unbound from the GL package feed. On my router, that still offers 1.19.3-1.

Do you know of a way to update Unbound itself on stock firmware, or whether GL backports security fixes to that package? That’s what I’m still trying to figure out before moving it off the Pi.

Thanks for the warning about RAM too. I’ll go easy on the blocklists if I try it.

4

Sorry no to both for me. I am content with not using unbound and I use at least one recursive upstream DNS:-

https://dns11.quad9.net/dns-query
tls://dns11.quad9.net
https://dns10.quad9.net/dns-query
9.9.9.11
149.112.112.11
2620:fe::11
2620:fe::fe:11

I also use "Load Balancing" for the upstream mode. Works for me.

As a side note I would not use the "available Update" feature under the applications menu to update any packages. My experience with doing that is it breaks a lot of things.

I find the ADGH Beta works well for me - I am using a few more block list than I did on my F3, though and I aggressively block Samsung (smart TV phoning home all the time) with Custom filters.

image
image777×264 19.5 KB