From d744222674eb2b5f384efd0a10c720300e87b32d Mon Sep 17 00:00:00 2001 From: Henry N Date: Wed, 1 Apr 2020 23:35:36 +0200 Subject: [PATCH] DNS Rebinding fix for all OS --- openvpn-install.sh | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/openvpn-install.sh b/openvpn-install.sh index 32ecba0..7c1e728 100755 --- a/openvpn-install.sh +++ b/openvpn-install.sh @@ -141,9 +141,8 @@ harden-glue: yes qname-minimisation: yes prefetch: yes' >/etc/unbound/unbound.conf.d/openvpn.conf - if [[ ! "$OS" =~ (fedora|centos|amzn) ]];then - # DNS Rebinding fix - echo 'private-address: 10.0.0.0/8 + # DNS Rebinding fix + echo 'private-address: 10.0.0.0/8 private-address: 172.16.0.0/12 private-address: 192.168.0.0/16 private-address: 169.254.0.0/16 @@ -151,7 +150,6 @@ private-address: fd00::/8 private-address: fe80::/10 private-address: 127.0.0.0/8 private-address: ::ffff:0:0/96' >>/etc/unbound/unbound.conf.d/openvpn.conf - fi # Add as include, if no wildcard include exist if ! grep -q '/etc/unbound/unbound.conf.d/' /etc/unbound/unbound.conf; then