Commit Graph

8 Commits

Author SHA1 Message Date
Michael Tremer
c2adb460d6 Revert "unbound: Deactivate qname-minimization & harden-below-nxdomain"
This reverts commit 86e9d04bfb.

This seems to be working with unbound 1.6.0 so that this can be
re-enabled for better privacy.

http://lists.ipfire.org/pipermail/development/2016-December/002807.html
2016-12-16 11:59:59 +00:00
Michael Tremer
86e9d04bfb unbound: Deactivate qname-minimization & harden-below-nxdomain
This causes trouble when you try to resolve a record like
a.b.blah.com where b.blah.com responds with NXDOMAIN. unbound
won't try to resolve a.b.blah.com because it is assumed that
everything longer than b.blah.com does not exist which is
probably not good usability.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-11-25 17:45:39 +00:00
Michael Tremer
d4af85f252 unbound: Send out replies from where they came in
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-11-04 18:23:25 +00:00
Michael Tremer
3ddad158cd unbound: Allow recursion from everywhere
Users use the IPFire DNS service from VPNs and other
routed networks.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-11-04 17:08:13 +00:00
Michael Tremer
1b4d5ad9af unbound: Move "listen on all" to main configuration file
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-10-12 22:37:26 +01:00
Michael Tremer
b658a451fb unbound: Automatically scale configuration to system
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-09-08 19:46:43 +01:00
Michael Tremer
b8f5eda86b unbound: Rewrite configuration and initscript
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-06 19:20:27 +01:00
Marcel Lorenz
d0e5f71f77 New package: unbound 1.5.9
Unbound is a validating, recursive, and caching DNS resolver.

https://www.unbound.net

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-08-05 13:29:09 +01:00