From f302a333afbd3fee4d24aaa0a07c7d86a2b1b1ce Mon Sep 17 00:00:00 2001 From: Jean Cyr Date: Wed, 3 Dec 2014 22:23:34 -0500 Subject: [PATCH] Link local interfaces don't have subnet.. don't create access-control statement Selecting link local interface for unbound causes invalid access-control statement in unbound config since link local address doesn't have subnet. --- etc/inc/unbound.inc | 12 +++++++----- 1 file changed, 7 insertions(+), 5 deletions(-) diff --git a/etc/inc/unbound.inc b/etc/inc/unbound.inc index 7f34df6d97..3f79b62a93 100644 --- a/etc/inc/unbound.inc +++ b/etc/inc/unbound.inc @@ -622,11 +622,13 @@ function unbound_acls_config() { } $ifip = get_interface_ipv6($ubif); if (is_ipaddrv6($ifip)) { - $subnet_bits = get_interface_subnetv6($ubif); - $subnet_ip = gen_subnetv6($ifip, $subnet_bits); - // only add LAN-type interfaces - if (!interface_has_gateway($ubif)) - $aclcfg .= "access-control: {$subnet_ip}/{$subnet_bits} allow\n"; + if (!is_linklocal($ifip)) { + $subnet_bits = get_interface_subnetv6($ubif); + $subnet_ip = gen_subnetv6($ifip, $subnet_bits); + // only add LAN-type interfaces + if (!interface_has_gateway($ubif)) + $aclcfg .= "access-control: {$subnet_ip}/{$subnet_bits} allow\n"; + } // add for IPv6 static routes to local networks // for safety, we include only routes reachable on an interface with no // gateway specified - read: not an Internet connection.