Network
/
2015
10
0
Fork 0
Code Issues 5 Pull Requests Packages Projects Releases Wiki Activity

Initial unbound configuration 

Add access control, listen to the wildcard interfaces and add Debian's
config files.
This commit is contained in:
Petko Bordjukov 2015-11-02 05:57:09 +02:00
parent 2e3e187ceb
commit d262b3d839
1 changed files with 14 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
dns-unbound/unbound.conf
View File

@ -1,10 +1,3 @@
#
# Example configuration file.
#
# See unbound.conf(5) man page, version 1.4.22.
#
# this is a comment.
#Use this to include other text into the file. #Use this to include other text into the file.
#include: "otherfile.conf" #include: "otherfile.conf"
@ -38,6 +31,8 @@ server:
# interface: 192.0.2.154 # interface: 192.0.2.154
# interface: 192.0.2.154@5003 # interface: 192.0.2.154@5003
# interface: 2001:DB8::5 # interface: 2001:DB8::5
interface: 0.0.0.0
interface: ::0
# enable this feature to copy the source address of queries to reply. # enable this feature to copy the source address of queries to reply.
# Socket options are not supported on all platforms. experimental. # Socket options are not supported on all platforms. experimental.
@ -173,11 +168,16 @@ server:
# allow (recursive ok), allow_snoop (recursive and nonrecursive ok) # allow (recursive ok), allow_snoop (recursive and nonrecursive ok)
# deny_non_local (drop queries unless can be answered from local-data) # deny_non_local (drop queries unless can be answered from local-data)
# refuse_non_local (like deny_non_local but polite error reply). # refuse_non_local (like deny_non_local but polite error reply).
# access-control: 0.0.0.0/0 refuse access-control: 0.0.0.0/0 refuse
# access-control: 127.0.0.0/8 allow access-control: 127.0.0.0/8 allow
# access-control: ::0/0 refuse access-control: 10.0.0.0/8 allow
# access-control: ::1 allow access-control: ::0/0 refuse
# access-control: ::ffff:127.0.0.1 allow access-control: ::1 allow
access-control: ::ffff:127.0.0.1 allow
access-control: 2a01:b760:abc:2::/64 allow
access-control: 2a01:b760:abc:3::/64 allow
access-control: 2a01:b760:abc:4::/64 allow
access-control: 2a01:b760:abc:5::/64 allow
# if given, a chroot(2) is done to the given directory. # if given, a chroot(2) is done to the given directory.
# i.e. you can chroot to the working directory, for example, # i.e. you can chroot to the working directory, for example,
@ -589,3 +589,5 @@ remote-control:
# forward-zone: # forward-zone:
# name: "example.org" # name: "example.org"
# forward-host: fwd.example.com # forward-host: fwd.example.com
include: "/etc/unbound/unbound.conf.d/*.conf"