webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-28 11:43:25 +02:00
Code Issues Packages Projects Releases Wiki Activity

unbound: Move "listen on all" to main configuration file

Browse Source 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This commit is contained in:
Michael Tremer
2016-10-12 22:37:26 +01:00
parent b06187f5b6
commit 1b4d5ad9af
2 changed files with 4 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
config/unbound/unbound.conf
View File

@@ -61,11 +61,13 @@ server:
harden-algo-downgrade: no harden-algo-downgrade: no
use-caps-for-id: no use-caps-for-id: no
# Listen on all interfaces
interface: 0.0.0.0
# Deny access from everywhere # Deny access from everywhere
access-control: 0.0.0.0/0 refuse access-control: 0.0.0.0/0 refuse
# Listen on localhost # Allow access from localhost
interface: 127.0.0.1
access-control: 127.0.0.0/8 allow access-control: 127.0.0.0/8 allow
# Bootstrap root servers # Bootstrap root servers

3
src/initscripts/init.d/unbound
View File

@@ -148,9 +148,6 @@ write_interfaces_conf() {
( (
config_header config_header
echo "# bound to all interfaces"
echo "interface: 0.0.0.0"
# 1.1.1.1 is reserved for unused green # 1.1.1.1 is reserved for unused green
if [ -n "${GREEN_ADDRESS}" -a "${GREEN_ADDRESS}" != "1.1.1.1" ]; then if [ -n "${GREEN_ADDRESS}" -a "${GREEN_ADDRESS}" != "1.1.1.1" ]; then
echo "# allow access from GREEN" echo "# allow access from GREEN"