private-address defaults in example config

Unbound
1

Hello,

just some minor nitpicking: I've noticed that the example unbound.conf
included in the source tarball includes the directive "private-address:
fd00::/8". This is slightly incomplete; RFC 4193 reserves the whole
fc00::/7 range for local usage.

Therefore, you may want to change this line to "private-address:
fc00::/7" and add "c.f.ip6.arpa." to the local-zone list.

Regards,
Luis Ressel

2

Hi Luis,

According to that RFC, only addresses with the L bit (=8th bit) set to 1
are locally assigned. So that makes the fd00::/8 prefix.

Section 4.4 of that RFC mentions that the locally assigned addresses are
not recommended to be installed in the DNS. It also recommends returning
NXDOMAIN for d.f.ip6.arpa.

Regards,
-- Ralph