From c22386c5d4420d6639e75c1e27411ebd803f5071 Mon Sep 17 00:00:00 2001
From: Mikaela Suomalainen <mikaela.suomalainen@outlook.com>
Date: Mon, 29 Dec 2014 12:28:06 +0200
Subject: [PATCH] unbound: add access-control

---
 etc/unbound/unbound.conf.d/access-control | 9 +++++++++
 1 file changed, 9 insertions(+)
 create mode 100644 etc/unbound/unbound.conf.d/access-control

diff --git a/etc/unbound/unbound.conf.d/access-control b/etc/unbound/unbound.conf.d/access-control
new file mode 100644
index 00000000..d7afa1de
--- /dev/null
+++ b/etc/unbound/unbound.conf.d/access-control
@@ -0,0 +1,9 @@
+# Listen on public interfaces
+interface: 0.0.0.0
+# NOTE! `sysctl net.ipv6.bindv6only=1`
+interface: ::
+
+# Allow connecting from
+access-control: 10.0.0.0/8 allow
+access-control: 172.16.0.0/16 allow
+access-control: 192.168.0.0/16 allow