mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Skip v6 WANs in Unbound access-control. Ticket #4023

Browse Source
This commit is contained in:
Chris Buechler 2014-11-28 17:30:16 -06:00
parent 80075b9e87
commit 5a663a5d56
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
etc/inc/unbound.inc
View File

@ -619,7 +619,9 @@ function unbound_acls_config() {
if (is_ipaddrv6($ifip)) {
$subnet_bits = get_interface_subnetv6($ubif);
$subnet_ip = gen_subnetv6($ifip, $subnet_bits);
$aclcfg .= "access-control: {$subnet_ip}/{$subnet_bits} allow\n";
// only add LAN-type interfaces
if (!interface_has_gateway($ubif))
$aclcfg .= "access-control: {$subnet_ip}/{$subnet_bits} allow\n";
// add for IPv6 static routes to local networks
// for safety, we include only routes reachable on an interface with no
// gateway specified - read: not an Internet connection.