- listen-on-v6 { any; };
-
-// iank, allow queries from network namespace
-// even if the interface doesnt exist when bind starts.
-allow-recursion {
- 10.173.8.0/24;
- localhost;
-};
-allow-query-cache {
- 10.173.8.0/24;
- localhost;
-};
+ // iank: only listen on our public addresses, lets use unbound for
+ // local process resolution, like we do at fsf, so debugging issues
+ // works for both.
+ listen-on { 85.119.83.50; };
+ listen-on-v6 { 2001:ba8:1f1:f0c9::2; };