How to make Unbound block private IPs in resolved domains (DNS rebinding)

Question

I set up Unbound in my local network as a local DNS resolver. I noticed that it will not filter any private IP addresses in the resolved domains and forward any IP address that a domain resolves to.

In order to protect against DNS rebinding, I would like to make Unbound not return any private IP addresses from public domains to the clients, however I haven't found any information on that from the official documentation. Apparently dnsmasq does this protection by default.

score 6 · Accepted Answer · edited Jul 14 '20 at 11:53

6

That is called private-address: in Unbound. See this document and look for "private-address: "

edited Jul 14 '20 at 11:53

Matt

1,559

answered Jul 06 '17 at 19:12

Aaron

2,899
2
14
31

How to make Unbound block private IPs in resolved domains (DNS rebinding)

1 Answers1