unbound: improve local zone evaluation in UCI 6284/head
authorEric Luehrsen <ericluehrsen@hotmail.com>
Sun, 10 Jun 2018 19:20:24 +0000 (15:20 -0400)
committerEric Luehrsen <ericluehrsen@hotmail.com>
Wed, 13 Jun 2018 02:32:54 +0000 (22:32 -0400)
commita7fd69233d59ce38ac73598bb44d20cc05b04d15
treeca180aae5e55d385c0f0339cc314278f6b8feeb0
parentd6e7f64a3dabf86e39ffbce8478366e0c214a535
unbound: improve local zone evaluation in UCI

When UCI local zone is private and static, Unbound covered private
addresses with defaults. Optional delegated global IP6 prefix
protection lacked a static zone, but it was prevented from appearing
in global DNS responses. Domain names router-as-TLD, "lan." and
"local." were static, but they lacked default SOA or NS such as
Unbound had assinged to private addresses. Clean up these local
zones UCI evaluation and block global DNS inclusion.

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>
net/unbound/Makefile
net/unbound/files/README.md
net/unbound/files/iptools.sh
net/unbound/files/odhcpd.sh
net/unbound/files/unbound.sh