diff options
author | Chris Buechler <cmb@pfsense.org> | 2016-02-06 03:26:17 -0600 |
---|---|---|
committer | Chris Buechler <cmb@pfsense.org> | 2016-02-06 03:26:17 -0600 |
commit | 84588e0093f88fd342a39912c63fcaa8a9331e44 (patch) | |
tree | ca4e9883cc2f860cbb0f00a62ceda42067e80fa2 /src | |
parent | 5e946f38343f7ed78bbfc7abd616ec84dbfcc742 (diff) | |
download | pfsense-84588e0093f88fd342a39912c63fcaa8a9331e44.zip pfsense-84588e0093f88fd342a39912c63fcaa8a9331e44.tar.gz |
Don't include 127.0.0.0/8 in unbound.conf in forward mode. Ticket #5750
Diffstat (limited to 'src')
-rw-r--r-- | src/etc/inc/unbound.inc | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/src/etc/inc/unbound.inc b/src/etc/inc/unbound.inc index 492d5ae..c716d1a 100644 --- a/src/etc/inc/unbound.inc +++ b/src/etc/inc/unbound.inc @@ -326,7 +326,9 @@ forward-zone: EOD; foreach ($dnsservers as $dnsserver) { - $forward_conf .= "\tforward-addr: $dnsserver\n"; + if (is_ipaddr($dnsserver) && !ip_in_subnet($dnsserver, "127.0.0.0/8")) { + $forward_conf .= "\tforward-addr: $dnsserver\n"; + } } } } else { |