Project

General

Profile

Actions
Copy link

Bug #4111

closed

Unbound replies using wrong source IP when bound to *

Added by Chris Buechler about 10 years ago. Updated about 10 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
DNS Resolver
Target version:
2.2
Start date:
12/13/2014
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
2.2
Affected Architecture:

Description

When Unbound is bound to all interfaces, it replies back with the source IP it would use for initiating a new connection rather than the IP where the original request was destined.

Adding the following to unbound.conf fixes: 

interface-automatic: yes

Unbound's documentation calls that "experimental", though it works fine in every circumstance I can think of.

The one caveat to this is if you're restricting binding of Unbound, and set "interface-automatic: yes", Unbound actually binds to *:53. So only going to set this where it's already binding to *.

Actions
Copy link
 #1

Updated by Chris Buechler about 10 years ago

  • Status changed from Confirmed to Feedback

Fix committed and verified for the circumstance where binding all interfaces.

Actions
Copy link
 #2

Updated by Chris Buechler about 10 years ago

  • Status changed from Feedback to Resolved

If not ideal since it only completely fixes the circumstance where you're binding to *:53, this is the best we can do here given constraints of Unbound.

Actions
Copy link

Also available in: Atom PDF