From: Michael Tremer <michael.tremer@ipfire.org>
Date: Wed, 12 Jun 2019 16:14:28 +0000 (+0100)
Subject: unbound: Make some zones type-transparent
X-Git-Tag: v2.23-core135~21
X-Git-Url: http://git.ipfire.org/?p=ipfire-2.x.git;a=commitdiff_plain;h=e263c29c929e69e345833f436d4958d88264020c

unbound: Make some zones type-transparent

If we remove other records (like MX) from the response, we won't
be able to send mail to those hosts any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/src/initscripts/system/unbound b/src/initscripts/system/unbound
index daaa3d705d..34b3e06fda 100644
--- a/src/initscripts/system/unbound
+++ b/src/initscripts/system/unbound
@@ -711,13 +711,13 @@ write_safe_search_conf() {
 		echo "server:"
 
 		# Bing
-		echo "	local-zone: www.bing.com transparent"
+		echo "	local-zone: bing.com transparent"
 		for address in $(resolve "strict.bing.com"); do
 			echo "	local-data: \"www.bing.com ${LOCAL_TTL} IN A ${address}\""
 		done
 
 		# DuckDuckGo
-		echo "	local-zone: duckduckgo.com transparent"
+		echo "	local-zone: duckduckgo.com typetransparent"
 		for address in $(resolve "safe.duckduckgo.com"); do
 			echo "	local-data: \"duckduckgo.com ${LOCAL_TTL} IN A ${address}\""
 		done
@@ -734,7 +734,7 @@ write_safe_search_conf() {
 
 		# Yandex
 		for domain in yandex.com yandex.ru; do
-			echo "	local-zone: ${domain} transparent"
+			echo "	local-zone: ${domain} typetransparent"
 			for address in $(resolve "familysearch.${domain}"); do
 				echo "	local-data: \"${domain} ${LOCAL_TTL} IN A ${address}\""
 			done