From: Michael Tremer <michael.tremer@ipfire.org>
Date: Sun, 11 Feb 2018 17:43:43 +0000 (+0000)
Subject: unbound: Fix reverse lookup zones
X-Git-Tag: v2.19-core120~154
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=c7e41255bb37b9bbc4da6f8631283ec0b048c39f;p=people%2Fstevee%2Fipfire-2.x.git

unbound: Fix reverse lookup zones

These should be stubs and overlay the internal zones that
unbound comes with.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Fixes: #11625
---

diff --git a/src/initscripts/system/unbound b/src/initscripts/system/unbound
index 4e7e63e5fa..a46999992a 100644
--- a/src/initscripts/system/unbound
+++ b/src/initscripts/system/unbound
@@ -210,10 +210,24 @@ write_forward_conf() {
 					;;
 			esac
 
-			echo "forward-zone:"
-			echo "	name: ${zone}"
-			echo "	forward-addr: ${server}"
-			echo
+			# Reverse-lookup zones must be stubs
+			case "${zone}" in
+				*.in-addr.arpa)
+					echo "stub-zone:"
+					echo "	name: ${zone}."
+					echo "	stub-addr: ${server}"
+					echo
+					echo "server:"
+					echo "	local-zone: \"${zone}.\" transparent"
+					echo
+					;;
+				*)
+					echo "forward-zone:"
+					echo "	name: ${zone}."
+					echo "	forward-addr: ${server}"
+					echo
+					;;
+			esac
 		done < /var/ipfire/dnsforward/config
 
 		if [ -n "${insecure_zones}" ]; then