Fabio/openvpn-install
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

unbound IPv6 listen and access-control

Browse source 
Add IPv6 interface (listen), access-control and private-address into /etc/unbound/openvpn.conf
This commit is contained in:
Henry N 2020-03-31 17:15:46 +02:00 committed by GitHub
parent 192fdb156c
commit e961d5db60
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 12 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
openvpn-install.sh
View file

@ -157,10 +157,17 @@ prefetch: yes' >> /etc/unbound/unbound.conf
qname-minimisation: yes
prefetch: yes' > /etc/unbound/unbound.conf
fi
# IPv6 DNS for all OS
if [[ "$IPV6_SUPPORT" == 'y' ]]; then
echo 'interface: fd42:42:42:42::1
access-control: fd42:42:42:42::/112 allow' >> /etc/unbound/unbound.conf
fi
if [[ ! "$OS" =~ (fedora|centos|amzn) ]];then
# DNS Rebinding fix
echo "private-address: 10.0.0.0/8
private-address: fd42:42:42:42::/112
private-address: 172.16.0.0/12
private-address: 192.168.0.0/16
private-address: 169.254.0.0/16
@ -181,6 +188,7 @@ hide-version: yes
use-caps-for-id: yes
prefetch: yes
private-address: 10.0.0.0/8
private-address: fd42:42:42:42::/112
private-address: 172.16.0.0/12
private-address: 192.168.0.0/16
private-address: 169.254.0.0/16
@ -188,6 +196,10 @@ private-address: fd00::/8
private-address: fe80::/10
private-address: 127.0.0.0/8
private-address: ::ffff:0:0/96' > /etc/unbound/openvpn.conf
if [[ "$IPV6_SUPPORT" == 'y' ]]; then
echo 'interface: fd42:42:42:42::1
access-control: fd42:42:42:42::/112 allow' >> /etc/unbound/unbound.conf
fi
fi
systemctl enable unbound