From abcab8b822a2c7531a60926f7113363ad4725788 Mon Sep 17 00:00:00 2001 From: angristan Date: Sat, 15 Sep 2018 18:19:07 +0200 Subject: [PATCH] Fix DNS rebinding See https://github.com/angristan/local-dns-resolver/commit/70d6627e6deb88fadf0b687e9dd6fea600f65183 --- openvpn-install.sh | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/openvpn-install.sh b/openvpn-install.sh index 95da260..86ade61 100644 --- a/openvpn-install.sh +++ b/openvpn-install.sh @@ -159,8 +159,14 @@ prefetch: yes' > /etc/unbound/unbound.conf fi # DNS Rebinding fix - PRIVATE_ADDRESSES="10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 169.254.0.0/16 127.0.0.0/8" - echo "private-address: $PRIVATE_ADDRESSES" >> /etc/unbound/unbound.conf + echo "private-address: 10.0.0.0/8 +private-address: 172.16.0.0/12 +private-address: 192.168.0.0/16 +private-address: 169.254.0.0/16 +private-address: fd00::/8 +private-address: fe80::/10 +private-address: 127.0.0.0/8 +private-address: ::ffff:0:0/96" >> /etc/unbound/unbound.conf # Enable service at boot systemctl enable unbound