unbound: fix local_subnet for IPv6 addresses that contain a port
authorMark Mentovai <mark@mentovai.com>
Wed, 23 Nov 2022 14:14:38 +0000 (09:14 -0500)
committerTianling Shen <cnsztl@gmail.com>
Tue, 20 Dec 2022 06:33:04 +0000 (14:33 +0800)
This prevents a forwarding server named like ::1@5453 from being added
to unbound.conf as a forward-host instead of the correct forward-addr.
forward-host requires the name to be resolved, which is impossible in
the absence of another nameserver. Thus, forwarding-only configurations
referencing only the IPv6 loopback address with a port number were
broken.

Signed-off-by: Mark Mentovai <mark@mentovai.com>
net/unbound/files/iptools.sh

index 9524f4ffe0fbc807cb6f10bab696aeb16a174b20..6726ed360ad9a49abfe1454d1599e366f36777c4 100644 (file)
@@ -164,7 +164,7 @@ local_subnet() {
   # local subnet 2nd place is limited to one digit to improve the filter
   case "$1" in
     127"."[0-9]"."[0-9]*) echo "ok" ;;
-    ::1) echo "ok" ;;
+    ::1|::1@*|::1#*) echo "ok" ;;
     *) echo "not" ;;
   esac
 }