This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree".

The branch, next has been updated via c2adb460d66b2d7813bcda533960c9f4c7e89fb2 (commit) from ef2bb434022a72393bbaa270a886ce4cf579901f (commit)

Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below.

- Log ----------------------------------------------------------------- commit c2adb460d66b2d7813bcda533960c9f4c7e89fb2 Author: Michael Tremer michael.tremer@ipfire.org Date: Fri Dec 16 11:59:59 2016 +0000

Revert "unbound: Deactivate qname-minimization & harden-below-nxdomain"

This reverts commit 86e9d04bfb73eb256682a567e187fe1e5cdcc3ca.

This seems to be working with unbound 1.6.0 so that this can be re-enabled for better privacy.

http://lists.ipfire.org/pipermail/development/2016-December/002807.html

-----------------------------------------------------------------------

Summary of changes: config/unbound/unbound.conf | 2 ++ 1 file changed, 2 insertions(+)

Difference in files: diff --git a/config/unbound/unbound.conf b/config/unbound/unbound.conf index c9b01b8..3f724d8 100644 --- a/config/unbound/unbound.conf +++ b/config/unbound/unbound.conf @@ -42,6 +42,7 @@ server: # Privacy Options hide-identity: yes hide-version: yes + qname-minimisation: yes minimal-responses: yes

# DNSSEC @@ -55,6 +56,7 @@ server: harden-short-bufsize: no harden-large-queries: yes harden-dnssec-stripped: yes + harden-below-nxdomain: yes harden-referral-path: yes harden-algo-downgrade: no use-caps-for-id: no

hooks/post-receive -- IPFire 2.x development tree