mirror of
https://github.com/NLnetLabs/unbound.git
synced 2026-10-01 22:24:55 +02:00
W.C.A. Wijngaards
153f8d5353
limit auth-zone and rpz transfer amount and time taken. Default is disabled. This hardens against unbounded transfers. Thanks to Qifan Zhang, Palo Alto Networks, for the report.
33 lines
631 B
Plaintext
33 lines
631 B
Plaintext
server:
|
|
verbosity: 7
|
|
# num-threads: 1
|
|
interface: 127.0.0.1
|
|
port: @PORT@
|
|
use-syslog: no
|
|
directory: ""
|
|
pidfile: "unbound.pid"
|
|
chroot: ""
|
|
username: ""
|
|
do-not-query-localhost: no
|
|
use-caps-for-id: no
|
|
|
|
auth-zone:
|
|
name: "example.com"
|
|
for-upstream: yes
|
|
for-downstream: yes
|
|
master: "127.0.0.1@@TOPORT@"
|
|
max-transfer-size: 512
|
|
max-transfer-time: 2000
|
|
auth-zone:
|
|
name: "example2.com"
|
|
for-upstream: yes
|
|
for-downstream: yes
|
|
master: "127.0.0.1@@TOPORT@"
|
|
max-transfer-size: 512
|
|
max-transfer-time: 2000
|
|
remote-control:
|
|
control-enable: yes
|
|
control-interface: @CONTROL_PATH@/controlpipe.@CONTROL_PID@
|
|
control-use-cert: no
|
|
|