diff options
| author | Chris Buechler <cmb@pfsense.org> | 2014-11-28 16:29:56 -0600 |
|---|---|---|
| committer | Chris Buechler <cmb@pfsense.org> | 2014-11-28 16:30:49 -0600 |
| commit | 80075b9e87239ab3cfd8aa7d903fcc55e404b7f1 (patch) | |
| tree | a4e2399d32efc2318b835350f89a05a193d5f258 /etc/inc/unbound.inc | |
| parent | 719db60e4b8b638ec554a542457579c51945b99d (diff) | |
| download | pfsense-80075b9e87239ab3cfd8aa7d903fcc55e404b7f1.zip pfsense-80075b9e87239ab3cfd8aa7d903fcc55e404b7f1.tar.gz | |
fix v6 access-control in Unbound, Ticket #4023
Diffstat (limited to 'etc/inc/unbound.inc')
| -rw-r--r-- | etc/inc/unbound.inc | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/etc/inc/unbound.inc b/etc/inc/unbound.inc index 76c6eef..6e19dd2 100644 --- a/etc/inc/unbound.inc +++ b/etc/inc/unbound.inc @@ -604,6 +604,8 @@ function unbound_acls_config() { // Add our networks for active interfaces including localhost if (!empty($config['unbound']['active_interface'])) $active_interfaces = array_flip(explode(",", $config['unbound']['active_interface'])); + if (in_array("all", $active_interfaces, true)) + $active_interfaces = get_configured_interface_with_descr(); else $active_interfaces = get_configured_interface_with_descr(); @@ -612,7 +614,6 @@ function unbound_acls_config() { $ifip = get_interface_ip($ubif); if (is_ipaddrv4($ifip)) { // IPv4 is handled via NAT networks below - continue; } $ifip = get_interface_ipv6($ubif); if (is_ipaddrv6($ifip)) { |
