Hm, as far as I can tell Debian has never shipped a version which listens to something other than localhost by default. The upstream fixed this in 2007, before

Hm, as far as I can tell Debian has never shipped a version which listens to something other than localhost by default. The upstream fixed this in 2007, before Debian started packaging Unbound.