From: Michael Tremer Date: Wed, 12 Oct 2016 21:37:26 +0000 (+0100) Subject: unbound: Move "listen on all" to main configuration file X-Git-Tag: v2.19-core106~11 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=1b4d5ad9af5d3603331f31aef5dca67833808694;p=people%2Fstevee%2Fipfire-2.x.git unbound: Move "listen on all" to main configuration file Signed-off-by: Michael Tremer --- diff --git a/config/unbound/unbound.conf b/config/unbound/unbound.conf index 6d8a7f29c3..5193dd9312 100644 --- a/config/unbound/unbound.conf +++ b/config/unbound/unbound.conf @@ -61,11 +61,13 @@ server: harden-algo-downgrade: no use-caps-for-id: no + # Listen on all interfaces + interface: 0.0.0.0 + # Deny access from everywhere access-control: 0.0.0.0/0 refuse - # Listen on localhost - interface: 127.0.0.1 + # Allow access from localhost access-control: 127.0.0.0/8 allow # Bootstrap root servers diff --git a/src/initscripts/init.d/unbound b/src/initscripts/init.d/unbound index 136084458f..4c6b452225 100644 --- a/src/initscripts/init.d/unbound +++ b/src/initscripts/init.d/unbound @@ -148,9 +148,6 @@ write_interfaces_conf() { ( config_header - echo "# bound to all interfaces" - echo "interface: 0.0.0.0" - # 1.1.1.1 is reserved for unused green if [ -n "${GREEN_ADDRESS}" -a "${GREEN_ADDRESS}" != "1.1.1.1" ]; then echo "# allow access from GREEN"