mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1360 from jean-m-cyr/master

Browse Source
This commit is contained in:
Chris Buechler 2014-12-03 23:07:18 -06:00
commit 679c54fcee
1 changed files with 7 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
etc/inc/unbound.inc
View File

@ -622,11 +622,13 @@ function unbound_acls_config() {
}
$ifip = get_interface_ipv6($ubif);
if (is_ipaddrv6($ifip)) {
$subnet_bits = get_interface_subnetv6($ubif);
$subnet_ip = gen_subnetv6($ifip, $subnet_bits);
// only add LAN-type interfaces
if (!interface_has_gateway($ubif))
$aclcfg .= "access-control: {$subnet_ip}/{$subnet_bits} allow\n";
if (!is_linklocal($ifip)) {
$subnet_bits = get_interface_subnetv6($ubif);
$subnet_ip = gen_subnetv6($ifip, $subnet_bits);
// only add LAN-type interfaces
if (!interface_has_gateway($ubif))
$aclcfg .= "access-control: {$subnet_ip}/{$subnet_bits} allow\n";
}
// add for IPv6 static routes to local networks
// for safety, we include only routes reachable on an interface with no
// gateway specified - read: not an Internet connection.