4 ms·
Do note, this will not work if you for example have unbound (or any other DNS resolver on your network) setup to enforce privacy of certain addresses. privat
by X-Istence 12y ago
Do note, this will not work if you for example have unbound (or any other DNS resolver on your network) setup to enforce privacy of certain addresses.
private-address: 127.0.0.0/8
private-address: 10.0.0.0/8
private-address: 172.16.0.0/12
private-address: 192.168.0.0/16
private-address: 169.254.0.0/16
private-address: fd00::/8
private-address: fe80::/10
Here is the comment in the config file for the option:
# Enforce privacy of these addresses. Strips them away from answers.
# It may cause DNSSEC validation to additionally mark it as bogus.
# Protects against 'DNS Rebinding' (uses browser as network proxy).
# Only 'private-domain' and 'local-data' names are allowed to have
# these private addresses. No default.
The reason I have this enabled is because it can help stop certain attacks against the local network!