Unbound replies using wrong source IP when bound to *
When Unbound is bound to all interfaces, it replies back with the source IP it would use for initiating a new connection rather than the IP where the original request was destined.
Adding the following to unbound.conf fixes:
Unbound's documentation calls that "experimental", though it works fine in every circumstance I can think of.
The one caveat to this is if you're restricting binding of Unbound, and set "interface-automatic: yes", Unbound actually binds to *:53. So only going to set this where it's already binding to *.
Where binding Unbound to *:53, set "interface-automatic: yes" so replies are sourced from the correct IP. Ideally this should always work this way, but setting this causes Unbound to bind to *:53, which shouldn't happen where specific interfaces are chosen. Ticket #4111