summaryrefslogtreecommitdiffstats
path: root/etc/inc/unbound.inc
diff options
context:
space:
mode:
authorChris Buechler <cmb@pfsense.org>2014-11-26 01:18:31 -0600
committerChris Buechler <cmb@pfsense.org>2014-11-26 01:18:31 -0600
commitc683f6279f2fde8c2a02caaf4df7e55bbb403fdd (patch)
treee9de89360257dbd8789ca209a60ec1c79f6ec20f /etc/inc/unbound.inc
parente3045c51fcc069f084291b60f735d982c3dbf74d (diff)
downloadpfsense-c683f6279f2fde8c2a02caaf4df7e55bbb403fdd.zip
pfsense-c683f6279f2fde8c2a02caaf4df7e55bbb403fdd.tar.gz
include 169.254./16 in unbound's DNS rebinding protection
Diffstat (limited to 'etc/inc/unbound.inc')
-rw-r--r--etc/inc/unbound.inc1
1 files changed, 1 insertions, 0 deletions
diff --git a/etc/inc/unbound.inc b/etc/inc/unbound.inc
index 513b53c..76512c9 100644
--- a/etc/inc/unbound.inc
+++ b/etc/inc/unbound.inc
@@ -120,6 +120,7 @@ function unbound_generate_config() {
# For DNS Rebinding prevention
private-address: 10.0.0.0/8
private-address: 172.16.0.0/12
+private-address: 169.254.0.0/16
private-address: 192.168.0.0/16
private-address: fd00::/8
private-address: fe80::/10
OpenPOWER on IntegriCloud