unbound: Allow recursion from everywhere

Users use the IPFire DNS service from VPNs and other
routed networks.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This commit is contained in:
Michael Tremer
2016-11-04 17:00:24 +00:00
parent a6dcc5bb77
commit 3ddad158cd
3 changed files with 4 additions and 27 deletions

View File

@@ -147,23 +147,6 @@ update_hosts() {
done < /var/ipfire/main/hosts
}
write_interfaces_conf() {
(
config_header
# 1.1.1.1 is reserved for unused green
if [ -n "${GREEN_ADDRESS}" -a "${GREEN_ADDRESS}" != "1.1.1.1" ]; then
echo "# allow access from GREEN"
echo "access-control: $(cidr ${GREEN_NETADDRESS} ${GREEN_NETMASK}) allow"
fi
if [ -n "${BLUE_ADDRESS}" ]; then
echo "# allow access from BLUE"
echo "access-control: $(cidr ${BLUE_NETADDRESS} ${BLUE_NETMASK}) allow"
fi
) > /etc/unbound/interfaces.conf
}
write_forward_conf() {
(
config_header
@@ -351,7 +334,6 @@ case "$1" in
# Update configuration files
write_tuning_conf
write_interfaces_conf
write_forward_conf
boot_mesg "Starting Unbound DNS Proxy..."