From afeb18ff0ecaec2e9d0da1801fe9cebf5b99a3ca Mon Sep 17 00:00:00 2001
From: jim-p <jimp@netgate.com>
Date: Wed, 28 Aug 2019 16:30:05 -0400
Subject: [PATCH] Add 127.0.0.0/8 to Unbound private-address list. Fixes #9708

---
 src/etc/inc/unbound.inc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/etc/inc/unbound.inc b/src/etc/inc/unbound.inc
index 8bd39e6cfd..51fd9261f9 100644
--- a/src/etc/inc/unbound.inc
+++ b/src/etc/inc/unbound.inc
@@ -193,6 +193,7 @@ function unbound_generate_config_text($unboundcfg = NULL, $cfgsubdir = "") {
 		// Private-addresses for DNS Rebinding
 		$private_addr = <<<EOF
 # For DNS Rebinding prevention
+private-address: 127.0.0.0/8
 private-address: 10.0.0.0/8
 private-address: ::ffff:a00:0/104
 private-address: 172.16.0.0/12