summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorChristian Poessinger <christian@poessinger.com>2018-11-08 16:01:54 +0100
committerChristian Poessinger <christian@poessinger.com>2018-11-08 16:05:26 +0100
commita76b2a889a7aa240c5f1c624bcf0791e33915d88 (patch)
tree77e927a5270c28efb41bc2dd8cc7294d3626d721
parentf9e12731ec3a24e1dafeac733eb3594d0f049916 (diff)
downloadvyos-1x-a76b2a889a7aa240c5f1c624bcf0791e33915d88.tar.gz
vyos-1x-a76b2a889a7aa240c5f1c624bcf0791e33915d88.zip
T974: bugfix dns forwarder not listening on IPv6 addresses
By default PowerDNS only allows 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16 for incoming DNS queries - we changed this to 0.0.0.0/0 to be reachable by everyone. This only covered the IPv4 address space and any IPv6 related query was not handled by the server. (cherry picked from commit 1682d7167461ab9ef72471b31b199094b335276d)
-rwxr-xr-xsrc/conf_mode/dns_forwarding.py2
1 files changed, 1 insertions, 1 deletions
diff --git a/src/conf_mode/dns_forwarding.py b/src/conf_mode/dns_forwarding.py
index 43be9d526..17788f12a 100755
--- a/src/conf_mode/dns_forwarding.py
+++ b/src/conf_mode/dns_forwarding.py
@@ -36,7 +36,7 @@ config_tmpl = """
# Non-configurable defaults
daemon=yes
threads=1
-allow-from=0.0.0.0/0
+allow-from=0.0.0.0/0, ::/0
log-common-errors=yes
non-local-bind=yes