unbound: add access-control

2014-12-29 12:28:06 +02:00 · 2014-12-29 12:28:06 +02:00 · c22386c5d4
parent 76d4ed352f
commit c22386c5d4
1 changed files with 9 additions and 0 deletions
--- a/etc/unbound/unbound.conf.d/access-control
+++ b/etc/unbound/unbound.conf.d/access-control
@ -0,0 +1,9 @@
+# Listen on public interfaces
+interface: 0.0.0.0
+# NOTE! `sysctl net.ipv6.bindv6only=1`
+interface: ::
+
+# Allow connecting from
+access-control: 10.0.0.0/8 allow
+access-control: 172.16.0.0/16 allow
+access-control: 192.168.0.0/16 allow