[git.ipfire.org] IPFire 2.x development tree branch, next, updated. c2adb460d66b2d7813bcda533960c9f4c7e89fb2

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. c2adb460d66b2d7813bcda533960c9f4c7e89fb2

[git]

[-- Attachment #1: Type: text/plain, Size: 1828 bytes --]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".

The branch, next has been updated
       via  c2adb460d66b2d7813bcda533960c9f4c7e89fb2 (commit)
      from  ef2bb434022a72393bbaa270a886ce4cf579901f (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit c2adb460d66b2d7813bcda533960c9f4c7e89fb2
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date:   Fri Dec 16 11:59:59 2016 +0000

    Revert "unbound: Deactivate qname-minimization & harden-below-nxdomain"
    
    This reverts commit 86e9d04bfb73eb256682a567e187fe1e5cdcc3ca.
    
    This seems to be working with unbound 1.6.0 so that this can be
    re-enabled for better privacy.
    
    http://lists.ipfire.org/pipermail/development/2016-December/002807.html

-----------------------------------------------------------------------

Summary of changes:
 config/unbound/unbound.conf | 2 ++
 1 file changed, 2 insertions(+)

Difference in files:
diff --git a/config/unbound/unbound.conf b/config/unbound/unbound.conf
index c9b01b8..3f724d8 100644
--- a/config/unbound/unbound.conf
+++ b/config/unbound/unbound.conf
@@ -42,6 +42,7 @@ server:
 	# Privacy Options
 	hide-identity: yes
 	hide-version: yes
+	qname-minimisation: yes
 	minimal-responses: yes
 
 	# DNSSEC
@@ -55,6 +56,7 @@ server:
 	harden-short-bufsize: no
 	harden-large-queries: yes
 	harden-dnssec-stripped: yes
+	harden-below-nxdomain: yes
 	harden-referral-path: yes
 	harden-algo-downgrade: no
 	use-caps-for-id: no


hooks/post-receive
--
IPFire 2.x development tree