I have a Pfsense home server. With one Lan, for example 192.168.100.254 for the Firewall IP.
And I have a Wifi captive portal on second subnet, with 192.168.200.254 for Firewall IP.
Unbound DNS resolver is configured, properly, listening on Lan and Wifi interfaces.
On Guest Wifi, only 80, 443, and 53 ports are allowed. (Port 53 is allowed only to 192.168.200.254).
But from this Wifi guests network, I can ask 192.168.200.254 with nslookup , and retrieve some records of connected hosts on the LAN...
Unbound answer with 192.168.200.254 as server, but seems allow to resolve LAN records for this Wifi subnet...
Is there an Unbound specific config to deny/drop these requests ?