unbound: make option interface_auto default on

Unbound has a quirk and may reply on a different device address.
When Unbound answers with from-address different than it
received queries on, it may cause trouble for select VPN and
firewall configurations. Ensure Unbound replies with the same
address by changing this default.

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>

diff --git a/net/unbound/Makefile b/net/unbound/Makefile
index 0afb0e1c85082d0cfb7282f370cb55fe75bffe56..fff82d1d19b9eef1fd462b64d8c0d91b6c7e85c9 100644 (file)
--- a/net/unbound/Makefile
+++ b/net/unbound/Makefile
@@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
 
 PKG_NAME:=unbound
 PKG_VERSION:=1.10.1
-PKG_RELEASE:=2
+PKG_RELEASE:=3
 
 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
 PKG_SOURCE_URL:=https://nlnetlabs.nl/downloads/unbound

diff --git a/net/unbound/files/README.md b/net/unbound/files/README.md
index 52378d5c5033f44a01518be2913486e1ed985e3e..ec06de5a0629b291bcecfc3e1416d0a51030db58 100644 (file)
--- a/net/unbound/files/README.md
+++ b/net/unbound/files/README.md
@@ -261,7 +261,7 @@ config unbound
     Boolean. If enabled version.server, version.bind, id.server, and
     hostname.bind queries are refused.
 
-  option interface_auto '0'
+  option interface_auto '1'
     Boolean. If enabled DNS replies will have the same source address as
     the request was sent to.
 

diff --git a/net/unbound/files/unbound.sh b/net/unbound/files/unbound.sh
index 5cc959b7f7c8986c7b21e14bba62673e0d6c23dc..a57d81d4ea4083c9ad50b731f3bb5e378c9b6c14 100644 (file)
--- a/net/unbound/files/unbound.sh
+++ b/net/unbound/files/unbound.sh
@@ -36,7 +36,7 @@ UB_B_NTP_BOOT=1
 UB_B_QUERY_MIN=0
 UB_B_QRY_MINST=0
 UB_B_AUTH_ROOT=0
-UB_B_IF_AUTO=0
+UB_B_IF_AUTO=1
 
 UB_D_CONTROL=0
 UB_D_DOMAIN_TYPE=static
@@ -1214,7 +1214,7 @@ unbound_uci() {
   config_get_bool UB_B_LOCL_BLCK  "$cfg" rebind_localhost 0
   config_get_bool UB_B_DNSSEC     "$cfg" validator 0
   config_get_bool UB_B_NTP_BOOT   "$cfg" validator_ntp 1
-  config_get_bool UB_B_IF_AUTO    "$cfg" interface_auto 0
+  config_get_bool UB_B_IF_AUTO    "$cfg" interface_auto 1
 
   config_get UB_IP_DNS64    "$cfg" dns64_prefix "64:ff9b::/96"
 

diff --git a/net/unbound/files/unbound.uci b/net/unbound/files/unbound.uci
index b75381f96b5d25edc65235a9a5ac9761ac0c51ea..12809b95d358323c11ddb3153f296f0aa4d0d4b3 100644 (file)
--- a/net/unbound/files/unbound.uci
+++ b/net/unbound/files/unbound.uci
@@ -11,6 +11,7 @@ config unbound
        option edns_size '1280'
        option extended_stats '0'
        option hide_binddata '1'
+       option interface_auto '1'
        option listen_port '53'
        option localservice '1'
        option manual_conf '0'
@@ -28,7 +29,6 @@ config unbound
        option validator '0'
        option validator_ntp '1'
        option verbosity '1'
-       option interface_auto '0'
        list trigger_interface 'lan'
        list trigger_interface 'wan'
        #list domain_insecure 'ntp.example.com'