summaryrefslogtreecommitdiffstats
path: root/src
diff options
context:
space:
mode:
authorChris Buechler <cmb@pfsense.org>2016-02-06 03:26:17 -0600
committerChris Buechler <cmb@pfsense.org>2016-02-06 03:26:17 -0600
commit84588e0093f88fd342a39912c63fcaa8a9331e44 (patch)
treeca4e9883cc2f860cbb0f00a62ceda42067e80fa2 /src
parent5e946f38343f7ed78bbfc7abd616ec84dbfcc742 (diff)
downloadpfsense-84588e0093f88fd342a39912c63fcaa8a9331e44.zip
pfsense-84588e0093f88fd342a39912c63fcaa8a9331e44.tar.gz
Don't include 127.0.0.0/8 in unbound.conf in forward mode. Ticket #5750
Diffstat (limited to 'src')
-rw-r--r--src/etc/inc/unbound.inc4
1 files changed, 3 insertions, 1 deletions
diff --git a/src/etc/inc/unbound.inc b/src/etc/inc/unbound.inc
index 492d5ae..c716d1a 100644
--- a/src/etc/inc/unbound.inc
+++ b/src/etc/inc/unbound.inc
@@ -326,7 +326,9 @@ forward-zone:
EOD;
foreach ($dnsservers as $dnsserver) {
- $forward_conf .= "\tforward-addr: $dnsserver\n";
+ if (is_ipaddr($dnsserver) && !ip_in_subnet($dnsserver, "127.0.0.0/8")) {
+ $forward_conf .= "\tforward-addr: $dnsserver\n";
+ }
}
}
} else {
OpenPOWER on IntegriCloud