Mercurial > repos > other > Puppet

annotate common/unbound.conf-ibbpi @ 476:b0531370e183

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Avoid fully controllable rewrite prefix Apache doesn't guarantee that rewrites are URLs or paths within the prefix and will process them rather than error, so close a fully controllable rewrite prefix: https://blog.orange.tw/2024/08/confusion-attacks-en.html?m=1
author IBBoard <dev@ibboard.co.uk>
date Sun, 11 Aug 2024 13:29:59 +0100
parents f4ed14153cda
children 2c3e745be8d2
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
450
f4ed14153cda Setup Unbound config on Pi server
IBBoard <dev@ibboard.co.uk>
parents:
diff changeset
1 # Based on https://www.nlnetlabs.nl/documentation/unbound/howto-setup/
f4ed14153cda Setup Unbound config on Pi server
IBBoard <dev@ibboard.co.uk>
parents:
diff changeset
2 # Note: If the upstream DNS stops synthesising IPv6 records for IPv4-only
f4ed14153cda Setup Unbound config on Pi server
IBBoard <dev@ibboard.co.uk>
parents:
diff changeset
3 # domains due to honouring DNSSEC then we need to go back to doing DNS64 here
f4ed14153cda Setup Unbound config on Pi server
IBBoard <dev@ibboard.co.uk>
parents:
diff changeset
4 server:
f4ed14153cda Setup Unbound config on Pi server
IBBoard <dev@ibboard.co.uk>
parents:
diff changeset
5 interface: 127.0.0.1
f4ed14153cda Setup Unbound config on Pi server
IBBoard <dev@ibboard.co.uk>
parents:
diff changeset
6 interface: ::1
f4ed14153cda Setup Unbound config on Pi server
IBBoard <dev@ibboard.co.uk>
parents:
diff changeset
7 access-control: 127.0.0.0/24 allow
f4ed14153cda Setup Unbound config on Pi server
IBBoard <dev@ibboard.co.uk>
parents:
diff changeset
8 access-control: ::1 allow
f4ed14153cda Setup Unbound config on Pi server
IBBoard <dev@ibboard.co.uk>
parents:
diff changeset
9 verbosity: 1
f4ed14153cda Setup Unbound config on Pi server
IBBoard <dev@ibboard.co.uk>
parents:
diff changeset
10
f4ed14153cda Setup Unbound config on Pi server
IBBoard <dev@ibboard.co.uk>
parents:
diff changeset
11 forward-zone:
f4ed14153cda Setup Unbound config on Pi server
IBBoard <dev@ibboard.co.uk>
parents:
diff changeset
12 name: "."
f4ed14153cda Setup Unbound config on Pi server
IBBoard <dev@ibboard.co.uk>
parents:
diff changeset
13 forward-addr: 2a00:1098:0:80:1000:3b:0:1
f4ed14153cda Setup Unbound config on Pi server
IBBoard <dev@ibboard.co.uk>
parents:
diff changeset
14 forward-addr: 2a00:1098:0:82:1000:3b:0:1