CVSROOT: /cvs
Module name: src
Changes by: st...@cvs.openbsd.org 2020/10/28 05:35:58
Modified files:
etc : unbound.conf
Log message:
Remove commented-out edns-buffer-size section from the default unbound.conf.
The default in Unbound (and other DNS server software in the recent "DNS flag
day") changed to 1232 bytes, this avoids problems due to fragmented packets
(fragments can result in blackholes and also enable some attack vectors)
so there's now little reason to reduce this from defaults, and increasing
it is more of a specialist use case that isn't really needed in this
streamlined default config.
