Disable ANY records due to DDoS

2019-09-21 16:54:41 -04:00 · 2019-09-21 16:54:41 -04:00 · ef556a7c68
parent b5b828af64
commit ef556a7c68
1 changed files with 3 additions and 0 deletions
--- a/unbound.conf
+++ b/unbound.conf
@ -12,6 +12,9 @@ include: "/etc/unbound/unbound.conf.d/*.conf"
 server:
  hide-version: yes

+  # Disable ANY records due to DDoS
+  deny-any: yes
+
  interface: 127.0.0.1
  interface: ::1