lucaspalomodevelop/core
1
0
Fork 0
mirror of https://github.com/lucaspalomodevelop/core.git synced 2026-03-15 00:54:41 +00:00
Code Issues Packages Projects Releases Wiki Activity

unbound: support insecure-domain for #5104

Browse Source
This commit is contained in:
Franco Fichtner 2021-07-30 14:38:30 +02:00
parent 00062ae8f8
commit 2b0c2caa44
3 changed files with 17 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
src/opnsense/mvc/app/controllers/OPNsense/Unbound/forms/dnsbl.xml
View File

@ -36,4 +36,12 @@
<allownew>true</allownew>
<help>List of domains to mark as private. You only need this for some DNSBL lists which resolve to private addresses.</help>
</field>
<field>
<id>unbound.miscellaneous.insecuredomain</id>
<label>Insecure Domains</label>
<type>select_multiple</type>
<style>tokenize</style>
<allownew>true</allownew>
<help>List of domains to mark as insecure. DNSSEC chain of trust is ignored towards the domain name.</help>
</field>
</form>

3
src/opnsense/mvc/app/models/OPNsense/Unbound/Unbound.xml
View File

@ -76,6 +76,9 @@
<privatedomain type="CSVListField">
<Required>N</Required>
</privatedomain>
<insecuredomain type="CSVListField">
<Required>N</Required>
</insecuredomain>
</miscellaneous>
</items>
</model>

7
src/opnsense/service/templates/OPNsense/Unbound/core/miscellaneous.conf
View File

@ -1,6 +1,11 @@
{% if not helpers.empty('OPNsense.unboundplus.miscellaneous.privatedomain') %}
server:
{% if not helpers.empty('OPNsense.unboundplus.miscellaneous.privatedomain') %}
{% for privatedomain in OPNsense.unboundplus.miscellaneous.privatedomain.split(',') %}
private-domain: {{ privatedomain }}
{% endfor %}
{% endif %}
{% if not helpers.empty('OPNsense.unboundplus.miscellaneous.insecuredomain') %}
{% for insecuredomain in OPNsense.unboundplus.miscellaneous.insecuredomain.split(',') %}
domain-insecure: {{ insecuredomain }}
{% endfor %}
{% endif %}