X-Git-Url: http://git.ipfire.org/?p=ipfire-2.x.git;a=blobdiff_plain;f=config%2Funbound%2Funbound.conf;fp=config%2Funbound%2Funbound.conf;h=ce9ddcd62fecab8900377b745d23c5ad6add8287;hp=3f724d8f76a81027a3a2b6542fb086a149010229;hb=ffba3c98bac2675f19f32541f5e1ebe61419e7bd;hpb=4ca0cb33543e780f02142cd70b18bb341d2eabad

diff --git a/config/unbound/unbound.conf b/config/unbound/unbound.conf
index 3f724d8f76..ce9ddcd62f 100644
--- a/config/unbound/unbound.conf
+++ b/config/unbound/unbound.conf
@@ -61,6 +61,9 @@ server:
 	harden-algo-downgrade: no
 	use-caps-for-id: no
 
+	# Harden against DNS cache poisoning
+	unwanted-reply-threshold: 1000000
+
 	# Listen on all interfaces
 	interface-automatic: yes
 	interface: 0.0.0.0