This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".

The branch, next has been updated
       via  c7e41255bb37b9bbc4da6f8631283ec0b048c39f (commit)
      from  cfa228c2f3c852ad6f5829fddfffe1f49a1f98f0 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit c7e41255bb37b9bbc4da6f8631283ec0b048c39f
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date:   Sun Feb 11 17:43:43 2018 +0000

    unbound: Fix reverse lookup zones
    
    These should be stubs and overlay the internal zones that
    unbound comes with.
    
    Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
    Fixes: #11625

-----------------------------------------------------------------------

Summary of changes:
 src/initscripts/system/unbound | 22 ++++++++++++++++++----
 1 file changed, 18 insertions(+), 4 deletions(-)

Difference in files:
diff --git a/src/initscripts/system/unbound b/src/initscripts/system/unbound
index 4e7e63e5f..a46999992 100644
--- a/src/initscripts/system/unbound
+++ b/src/initscripts/system/unbound
@@ -210,10 +210,24 @@ write_forward_conf() {
 					;;
 			esac
 
-			echo "forward-zone:"
-			echo "	name: ${zone}"
-			echo "	forward-addr: ${server}"
-			echo
+			# Reverse-lookup zones must be stubs
+			case "${zone}" in
+				*.in-addr.arpa)
+					echo "stub-zone:"
+					echo "	name: ${zone}."
+					echo "	stub-addr: ${server}"
+					echo
+					echo "server:"
+					echo "	local-zone: \"${zone}.\" transparent"
+					echo
+					;;
+				*)
+					echo "forward-zone:"
+					echo "	name: ${zone}."
+					echo "	forward-addr: ${server}"
+					echo
+					;;
+			esac
 		done < /var/ipfire/dnsforward/config
 
 		if [ -n "${insecure_zones}" ]; then


hooks/post-receive
--
IPFire 2.x development tree