dns improvements

2016-11-18 02:59:53 +01:00 · 2016-11-18 02:59:53 +01:00 · ebba2d1473
parent 1fb88bd139
commit ebba2d1473
2 changed files with 9 additions and 0 deletions
--- a/salt/unbound/init.sls
+++ b/salt/unbound/init.sls
@ -6,6 +6,13 @@ unbound:
        - pkg: unbound
        - file: /etc/unbound/unbound.conf.d/listen.conf

+dns-root-data:
+  pkg.installed: []
+
 /etc/unbound/unbound.conf.d/listen.conf:
  file.managed:
    - source: salt://unbound/listen.conf
+
+/etc/unbound/unbound.conf.d/root.conf:
+  file.managed:
+    - source: salt://unbound/root.conf
--- a/salt/unbound/listen.conf
+++ b/salt/unbound/listen.conf
@ -1,3 +1,5 @@
 server:
    interface: 0.0.0.0
    interface: ::
+    access-control: 172.20.72.0/21 allow
+    access-control: 0.0.0.0/0 refuse