mirror of
https://github.com/vincentmli/bpfire.git
synced 2026-04-13 04:22:58 +02:00
unbound: Allow recursion from everywhere
Users use the IPFire DNS service from VPNs and other routed networks. Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This commit is contained in:
@@ -147,23 +147,6 @@ update_hosts() {
|
||||
done < /var/ipfire/main/hosts
|
||||
}
|
||||
|
||||
write_interfaces_conf() {
|
||||
(
|
||||
config_header
|
||||
|
||||
# 1.1.1.1 is reserved for unused green
|
||||
if [ -n "${GREEN_ADDRESS}" -a "${GREEN_ADDRESS}" != "1.1.1.1" ]; then
|
||||
echo "# allow access from GREEN"
|
||||
echo "access-control: $(cidr ${GREEN_NETADDRESS} ${GREEN_NETMASK}) allow"
|
||||
fi
|
||||
|
||||
if [ -n "${BLUE_ADDRESS}" ]; then
|
||||
echo "# allow access from BLUE"
|
||||
echo "access-control: $(cidr ${BLUE_NETADDRESS} ${BLUE_NETMASK}) allow"
|
||||
fi
|
||||
) > /etc/unbound/interfaces.conf
|
||||
}
|
||||
|
||||
write_forward_conf() {
|
||||
(
|
||||
config_header
|
||||
@@ -351,7 +334,6 @@ case "$1" in
|
||||
|
||||
# Update configuration files
|
||||
write_tuning_conf
|
||||
write_interfaces_conf
|
||||
write_forward_conf
|
||||
|
||||
boot_mesg "Starting Unbound DNS Proxy..."
|
||||
|
||||
Reference in New Issue
Block a user