Project

General

Profile

Actions
Copy link

Bug #5750

closed

unbound.inc should not add 127.0.0.0/8 in forward mode

Added by Christopher Schirner almost 9 years ago. Updated almost 9 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
DNS Resolver
Target version:
2.3
Start date:
01/09/2016
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
2.2.x
Affected Architecture:

Description

Introduced in the commit [1], the local DNS servers are appended to unbound forward-zone. The function get_dns_servers() returns the parsed content of /etc/resolv.conf which also contains 127.0.0.1. This makes sense if one have a second DNS server running, with unbound running on a different port.

Maybe it makes sense to filter for the private net (127.0.0.0/8) if one want to use forwarding mode

[1] https://github.com/pfsense/pfsense/commit/383dd72d61c6e483e38b8e798c0cb1ffc0c3c1e4#diff-94bf801408ef72d2d60777a384b97152

Actions
Copy link

Also available in: Atom PDF