From 84588e0093f88fd342a39912c63fcaa8a9331e44 Mon Sep 17 00:00:00 2001
From: Chris Buechler <cmb@pfsense.org>
Date: Sat, 6 Feb 2016 03:26:17 -0600
Subject: Don't include 127.0.0.0/8 in unbound.conf in forward mode. Ticket
 #5750

---
 src/etc/inc/unbound.inc | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

(limited to 'src')

diff --git a/src/etc/inc/unbound.inc b/src/etc/inc/unbound.inc
index 492d5ae..c716d1a 100644
--- a/src/etc/inc/unbound.inc
+++ b/src/etc/inc/unbound.inc
@@ -326,7 +326,9 @@ forward-zone:
 
 EOD;
 			foreach ($dnsservers as $dnsserver) {
-				$forward_conf .= "\tforward-addr: $dnsserver\n";
+				if (is_ipaddr($dnsserver) && !ip_in_subnet($dnsserver, "127.0.0.0/8")) {
+					$forward_conf .= "\tforward-addr: $dnsserver\n";
+				}
 			}
 		}
 	} else {
-- 
cgit v1.1