Browse Source

unbound: make option interface_auto default on

Unbound has a quirk and may reply on a different device address.
When Unbound answers with from-address different than it
received queries on, it may cause trouble for select VPN and
firewall configurations. Ensure Unbound replies with the same
address by changing this default.

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
lilik-openwrt-22.03
Eric Luehrsen 4 years ago
parent
commit
af73a9b9a4
4 changed files with 5 additions and 5 deletions
  1. +1
    -1
      net/unbound/Makefile
  2. +1
    -1
      net/unbound/files/README.md
  3. +2
    -2
      net/unbound/files/unbound.sh
  4. +1
    -1
      net/unbound/files/unbound.uci

+ 1
- 1
net/unbound/Makefile View File

@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
PKG_NAME:=unbound PKG_NAME:=unbound
PKG_VERSION:=1.10.1 PKG_VERSION:=1.10.1
PKG_RELEASE:=2
PKG_RELEASE:=3
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://nlnetlabs.nl/downloads/unbound PKG_SOURCE_URL:=https://nlnetlabs.nl/downloads/unbound


+ 1
- 1
net/unbound/files/README.md View File

@ -261,7 +261,7 @@ config unbound
Boolean. If enabled version.server, version.bind, id.server, and Boolean. If enabled version.server, version.bind, id.server, and
hostname.bind queries are refused. hostname.bind queries are refused.
option interface_auto '0'
option interface_auto '1'
Boolean. If enabled DNS replies will have the same source address as Boolean. If enabled DNS replies will have the same source address as
the request was sent to. the request was sent to.


+ 2
- 2
net/unbound/files/unbound.sh View File

@ -36,7 +36,7 @@ UB_B_NTP_BOOT=1
UB_B_QUERY_MIN=0 UB_B_QUERY_MIN=0
UB_B_QRY_MINST=0 UB_B_QRY_MINST=0
UB_B_AUTH_ROOT=0 UB_B_AUTH_ROOT=0
UB_B_IF_AUTO=0
UB_B_IF_AUTO=1
UB_D_CONTROL=0 UB_D_CONTROL=0
UB_D_DOMAIN_TYPE=static UB_D_DOMAIN_TYPE=static
@ -1214,7 +1214,7 @@ unbound_uci() {
config_get_bool UB_B_LOCL_BLCK "$cfg" rebind_localhost 0 config_get_bool UB_B_LOCL_BLCK "$cfg" rebind_localhost 0
config_get_bool UB_B_DNSSEC "$cfg" validator 0 config_get_bool UB_B_DNSSEC "$cfg" validator 0
config_get_bool UB_B_NTP_BOOT "$cfg" validator_ntp 1 config_get_bool UB_B_NTP_BOOT "$cfg" validator_ntp 1
config_get_bool UB_B_IF_AUTO "$cfg" interface_auto 0
config_get_bool UB_B_IF_AUTO "$cfg" interface_auto 1
config_get UB_IP_DNS64 "$cfg" dns64_prefix "64:ff9b::/96" config_get UB_IP_DNS64 "$cfg" dns64_prefix "64:ff9b::/96"


+ 1
- 1
net/unbound/files/unbound.uci View File

@ -11,6 +11,7 @@ config unbound
option edns_size '1280' option edns_size '1280'
option extended_stats '0' option extended_stats '0'
option hide_binddata '1' option hide_binddata '1'
option interface_auto '1'
option listen_port '53' option listen_port '53'
option localservice '1' option localservice '1'
option manual_conf '0' option manual_conf '0'
@ -28,7 +29,6 @@ config unbound
option validator '0' option validator '0'
option validator_ntp '1' option validator_ntp '1'
option verbosity '1' option verbosity '1'
option interface_auto '0'
list trigger_interface 'lan' list trigger_interface 'lan'
list trigger_interface 'wan' list trigger_interface 'wan'
#list domain_insecure 'ntp.example.com' #list domain_insecure 'ntp.example.com'


Loading…
Cancel
Save