From 31377265f065649794f414123ed9bd8f455af8d4 Mon Sep 17 00:00:00 2001 From: Jean Cyr Date: Wed, 24 Sep 2014 21:26:44 -0400 Subject: [PATCH] Support IPV6 in unbound.conf IPv6 addresses are not included in unbound config and access list --- etc/inc/unbound.inc | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/etc/inc/unbound.inc b/etc/inc/unbound.inc index 21a982ae06..8cd922712e 100644 --- a/etc/inc/unbound.inc +++ b/etc/inc/unbound.inc @@ -132,6 +132,9 @@ EOF; $intip = get_interface_ip($ubif); if (!is_null($intip)) $bindints .= "interface: $intip\n"; + $intip = get_interface_ipv6($ubif); + if (!is_null($intip)) + $bindints .= "interface: $intip\n"; } } else { $bindints .= "interface: 0.0.0.0\n"; @@ -147,6 +150,9 @@ EOF; $outip = get_interface_ip($outif); if (!is_null($outip)) $outgoingints .= "outgoing-interface: $outip\n"; + $outip = get_interface_ipv6($outif); + if (!is_null($outip)) + $outgoingints .= "outgoing-interface: $outip\n"; } } @@ -643,6 +649,12 @@ function unbound_acls_config() { $subnet_ip = gen_subnet($ifip, $subnet_bits); $aclcfg .= "access-control: {$subnet_ip}/{$subnet_bits} allow\n"; } + $ifip = get_interface_ipv6($ubif); + if (!is_null($ifip)) { + $subnet_bits = get_interface_subnetv6($ubif); + $subnet_ip = gen_subnetv6($ifip, $subnet_bits); + $aclcfg .= "access-control: {$subnet_ip}/{$subnet_bits} allow\n"; + } } // Configure the custom ACLs