harden-glue: and qname-minimisation for all OS

harden-glue: yes and qname-minimisation: yes for all OS, not only for Arch.
This commit is contained in:
Henry N 2020-04-01 23:25:27 +02:00 committed by GitHub
parent 148cbf93a9
commit d31dad466a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -125,9 +125,7 @@ function installUnbound () {
trust-anchor-file: trusted-key.key trust-anchor-file: trusted-key.key
root-hints: root.hints root-hints: root.hints
port: 53 port: 53
num-threads: 2 num-threads: 2' >/etc/unbound/unbound.conf
harden-glue: yes
qname-minimisation: yes' >/etc/unbound/unbound.conf
fi fi
fi fi
@ -139,6 +137,8 @@ access-control: 10.8.0.1/24 allow
hide-identity: yes hide-identity: yes
hide-version: yes hide-version: yes
use-caps-for-id: yes use-caps-for-id: yes
harden-glue: yes
qname-minimisation: yes
prefetch: yes' >/etc/unbound/unbound.conf.d/openvpn.conf prefetch: yes' >/etc/unbound/unbound.conf.d/openvpn.conf
if [[ ! "$OS" =~ (fedora|centos|amzn) ]];then if [[ ! "$OS" =~ (fedora|centos|amzn) ]];then