prevent SMTP smuggling

[ansible.git] / roles / unbound / templates / fix-dns

diff --git a/roles/unbound/templates/fix-dns b/roles/unbound/templates/fix-dns
index ca7f860df582eb6e5d4f4a67b679f1d01ebf7ce2..f7b4bf2ceeec299cb9c845a948a34ddd865ac159 100644 (file)
--- a/roles/unbound/templates/fix-dns
+++ b/roles/unbound/templates/fix-dns
@@ -2,9 +2,9 @@
 set -e
 
 # Fix for some providers messing with DNS settings
 set -e
 
 # Fix for some providers messing with DNS settings

-if ! diff /etc/resolv.conf <(echo "nameserver 127.0.0.2") > /dev/null; then
+if ! diff /etc/resolv.conf /etc/resolv.conf.unbound > /dev/null; then

        echo "Someone messed up our DNS! Fixing it..."
        echo "Someone messed up our DNS! Fixing it..."

-       echo "nameserver 127.0.0.2" > /etc/resolv.conf
+       cp /etc/resolv.conf.unbound /etc/resolv.conf

 {% if 'email' in group_names %}
        # Just to make sure postfix uses the new settings
        systemctl restart postfix
 {% if 'email' in group_names %}
        # Just to make sure postfix uses the new settings
        systemctl restart postfix