mirror of
https://github.com/kernelkit/infix.git
synced 2026-08-03 06:13:02 +02:00
Joachim Wiberg
c5015faafe
Even though dnsmasq only listened to requests from 127.0.0.1, port 53 was visible using nmap. We only use dnsmasq as a local resolver, so we can safely change the config to bind to loopback instead, and at the same time get less noise from nmap scans. Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
19 lines
469 B
Plaintext
19 lines
469 B
Plaintext
# dnsmasq is the system resolver, the file /etc/resolv.conf is
|
|
# managed by openresolv. DHCP lease, VPN tunnel establishment,
|
|
# and similar events feed servers and configuration to dnsmasq.
|
|
domain-needed
|
|
|
|
# Only listen to loopback (local system)
|
|
interface=lo
|
|
bind-dynamic
|
|
#listen-address=127.0.0.1,::1
|
|
|
|
enable-dbus
|
|
|
|
# Generated by openresolv
|
|
resolv-file=/var/lib/misc/resolv.conf
|
|
|
|
# Include all files in a directory which end in .conf
|
|
conf-dir=/etc/dnsmasq.d/,*.conf
|
|
|