Project

General

Profile

Actions
Copy link

Bug #10460

closed

OpenVPN does not add IPv6 prefix to unbound DNS resolver

Added by MIchael K over 4 years ago. Updated over 4 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Renato Botelho
Category:
DNS Resolver
Target version:
2.4.5-p1
Start date:
04/15/2020
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
2.4.5
Affected Architecture:
amd64

Description

I added a private local IPv6 network (fd32:..../64) on the OpenVPN server setup. The idea was to avoid any real IP and simply have an internal network to mirror the 172.16 network on the IPv4 VPN. A DNS server on the OpenVPN setup included the IPv6 address of pfSense.

Whenever I do a DNS query, I was getting query refused on the IPv6 address.

It appears /var/unbound/access_lists.conf did not contain the IPv6 tunnel network the way IPv4 did.

This should be added automatically to allow resolution over the IPv6 addresses via
access-control: fd34:.../64 allow
for any network included in the IPv6 Tunnel Network for OpenVPN.

Actions
Copy link

Also available in: Atom PDF