diff options
| author | Chris Buechler <cmb@pfsense.org> | 2014-11-25 22:57:41 -0600 |
|---|---|---|
| committer | Chris Buechler <cmb@pfsense.org> | 2014-11-25 22:57:41 -0600 |
| commit | 31afa0845012952d731a191e55a126a12054e25e (patch) | |
| tree | 96ec0976856fa8eeeeded32d2c5eff8615b8297d /etc/inc/unbound.inc | |
| parent | 3bdf2a70153efe76b1924139fb862c5e00a2acd4 (diff) | |
| download | pfsense-31afa0845012952d731a191e55a126a12054e25e.zip pfsense-31afa0845012952d731a191e55a126a12054e25e.tar.gz | |
Skip interface subnets for IPv4 here, this is best handled via the NAT networks list. Ticket #4023
Diffstat (limited to 'etc/inc/unbound.inc')
| -rw-r--r-- | etc/inc/unbound.inc | 5 |
1 files changed, 2 insertions, 3 deletions
diff --git a/etc/inc/unbound.inc b/etc/inc/unbound.inc index 332f71c..05667ad 100644 --- a/etc/inc/unbound.inc +++ b/etc/inc/unbound.inc @@ -592,9 +592,8 @@ function unbound_acls_config() { foreach($active_interfaces as $ubif => $ifdesc) { $ifip = get_interface_ip($ubif); if (is_ipaddrv4($ifip)) { - $subnet_bits = get_interface_subnet($ubif); - $subnet_ip = gen_subnet($ifip, $subnet_bits); - $aclcfg .= "access-control: {$subnet_ip}/{$subnet_bits} allow\n"; + // IPv4 is handled via NAT networks below + continue; } $ifip = get_interface_ipv6($ubif); if (is_ipaddrv6($ifip)) { |
