From d31dad466a72812699c8df778a01402cee98f7e8 Mon Sep 17 00:00:00 2001 From: Henry N Date: Wed, 1 Apr 2020 23:25:27 +0200 Subject: [PATCH] harden-glue: and qname-minimisation for all OS harden-glue: yes and qname-minimisation: yes for all OS, not only for Arch. --- openvpn-install.sh | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/openvpn-install.sh b/openvpn-install.sh index 0faebea..32ecba0 100755 --- a/openvpn-install.sh +++ b/openvpn-install.sh @@ -125,9 +125,7 @@ function installUnbound () { trust-anchor-file: trusted-key.key root-hints: root.hints port: 53 - num-threads: 2 - harden-glue: yes - qname-minimisation: yes' >/etc/unbound/unbound.conf + num-threads: 2' >/etc/unbound/unbound.conf fi fi @@ -139,6 +137,8 @@ access-control: 10.8.0.1/24 allow hide-identity: yes hide-version: yes use-caps-for-id: yes +harden-glue: yes +qname-minimisation: yes prefetch: yes' >/etc/unbound/unbound.conf.d/openvpn.conf if [[ ! "$OS" =~ (fedora|centos|amzn) ]];then