From 6067f13c095ca1a2777b2040be15c6beac2ab45f Mon Sep 17 00:00:00 2001 From: Daniel McCarney Date: Thu, 23 Jul 2026 12:58:43 -0400 Subject: [PATCH 1/2] remove duplicate do-not-query-address entry --- unbound.conf | 1 - 1 file changed, 1 deletion(-) diff --git a/unbound.conf b/unbound.conf index ca82cb9..56a6a5e 100644 --- a/unbound.conf +++ b/unbound.conf @@ -55,7 +55,6 @@ server: do-not-query-address: 192.168.0.0/16 # RFC 1918 do-not-query-address: 172.16.0.0/12 # RFC 1918 do-not-query-address: 10.0.0.0/8 # RFC 1918 - do-not-query-address: 169.254.0.0/16 do-not-query-address: 127.0.0.0/8 # RFC 5735 do-not-query-address: 0.0.0.0/8 # RFC 1122 Section 3.2.1.3 do-not-query-address: 169.254.0.0/16 # RFC 3927 From f5ccf03dc4d082f89b051d72aeff2a10e84ecf84 Mon Sep 17 00:00:00 2001 From: Daniel McCarney Date: Thu, 23 Jul 2026 12:58:52 -0400 Subject: [PATCH 2/2] fix RFC 2544 benchmarking range to 198.18.0.0/15 RFC 2544 does list 192.18.0.0 as the lower range of the assigned network addresses, but this was a typo and should have been 198.18.0.0 to match the upper end (198.19.255.255). See this errata: https://errata.rfc-editor.org/eid423/ --- unbound.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/unbound.conf b/unbound.conf index 56a6a5e..0afe21b 100644 --- a/unbound.conf +++ b/unbound.conf @@ -63,7 +63,7 @@ server: do-not-query-address: 198.51.100.0/24 do-not-query-address: 203.0.113.0/24 do-not-query-address: 192.88.99.0/24 # RFC 3068 - do-not-query-address: 192.18.0.0/15 # RFC 2544 + do-not-query-address: 198.18.0.0/15 # RFC 2544 do-not-query-address: 224.0.0.0/4 # RFC 3171 do-not-query-address: 240.0.0.0/4 # RFC 1112 do-not-query-address: 255.255.255.255/32 # RFC 919 Section 7