On Apr 25, 2022, at 15:12, Fredrik Pettai via Unbound-users 
<[email protected]> wrote:
> 
> Hi,
> 
> It was some years since this option was added (unbound 1.5.7 I think).
> As per the man page for unbound.conf:
> 
> ...skipping...
>       private-address: <IP address or subnet>
>              Give  IPv4  of  IPv6  addresses  or classless subnets. These are
>              addresses on your private network, and are  not  allowed  to  be
>              returned  for  public  internet  names.   Any occurrence of such
>              addresses are removed from DNS answers.


> 
> Q: Are there any plans to update this and add the RFC1918 addresses
> as non-resolvable by default ?

I hope not. I think that would lead to many unexpected failures. I think this 
is an item that the DNS admin should enable if they are confident.


Additionally, if using unbound on laptops and you getting on via hotspots this 
would break badly.

Paul

Reply via email to