diff --git a/src/etc/inc/plugins.inc.d/dnsmasq.inc b/src/etc/inc/plugins.inc.d/dnsmasq.inc
index a20b78edd..7d43ad1c8 100644
--- a/src/etc/inc/plugins.inc.d/dnsmasq.inc
+++ b/src/etc/inc/plugins.inc.d/dnsmasq.inc
@@ -182,6 +182,12 @@ function dnsmasq_configure_do($verbose = false)
$args .= " --domain-needed ";
}
+ if (!empty($config['dnsmasq']['dnssec'])) {
+ $args .= ' --dnssec ';
+ $args .= ' --trust-anchor=.,19036,8,2,49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5 ';
+ $args .= ' --trust-anchor=.,20326,8,2,E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D ';
+ }
+
if (!empty($config['dnsmasq']['custom_options'])) {
foreach (preg_split('/\s+/', $config['dnsmasq']['custom_options']) as $c) {
$args .= " " . escapeshellarg("--{$c}");
diff --git a/src/www/services_dhcp.php b/src/www/services_dhcp.php
index c5a599c15..db81a4ec5 100644
--- a/src/www/services_dhcp.php
+++ b/src/www/services_dhcp.php
@@ -775,7 +775,7 @@ include("head.inc");
| =gettext("General DNS Forwarder Options");?> | +=gettext("General options");?> | =gettext("full help");?> @@ -240,18 +242,25 @@ $( document ).ready(function() { | =gettext("Enable");?> | /> - =gettext("Enable DNS Forwarder");?> + = gettext('Enable Dnsmasq') ?> + | +
| =gettext('DNSSEC') ?> | ++ /> + = gettext('Enable DNSSEC Support') ?> | |||
| =gettext("DHCP Registration");?> |
/>
- =gettext("Register DHCP leases in DNS forwarder");?>
+ = gettext('Register DHCP leases') ?>
= gettext("If this option is set, then machines that specify " .
"their hostname when requesting a DHCP lease will be registered " .
- "in the DNS forwarder, so that their name can be resolved.") ?>
+ "in Dnsmasq, so that their name can be resolved.") ?>
|
=gettext("Static DHCP");?> |
/>
- =gettext("Register DHCP static mappings in DNS forwarder");?>
+ = gettext('Register DHCP static mappings') ?>
= sprintf(gettext("If this option is set, then DHCP static mappings will ".
- "be registered in the DNS forwarder, so that their name can be ".
+ "be registered in Dnsmasq, so that their name can be ".
"resolved. You should also set the domain in %s".
"System: General setup%s to the proper value."),'','');?>
@@ -284,7 +293,7 @@ $( document ).ready(function() {
| =gettext("Prefer DHCP");?> |
/>
- =gettext("Resolve DHCP mappings first");?>
+ = gettext('Resolve DHCP mappings first') ?>
= sprintf(gettext("If this option is set, then DHCP mappings will ".
"be resolved before the manual list of names below. This only ".
@@ -295,52 +304,48 @@ $( document ).ready(function() {
=gettext("DNS Query Forwarding");?> |
- |
+
+ = gettext("If this option is set, Dnsmasq will ".
+ "query the DNS servers sequentially in the order specified (System: " .
+ "General Setup: DNS Servers), rather than all at once in parallel.") ?>
+
+
+ |
+ />
+ = gettext('Require domain') ?>
+ |
+
+ = gettext('If this option is set, Dnsmasq will '.
+ 'not forward A or AAAA queries for plain names, without dots or ' .
+ 'domain parts, to upstream name servers. If the name is not known ' .
+ 'from /etc/hosts or DHCP then a "not found" answer is returned.') ?>
+
+
+ |
+ />
+ = gettext('Do not forward private reverse lookups') ?>
+ |
+ = gettext('If this option is set, Dnsmasq will '.
+ 'not forward reverse DNS lookups (PTR) for private addresses ' .
+ '(RFC 1918) to upstream name servers. Any entries in the Domain ' .
+ 'Overrides section forwarding private "n.n.n.in-addr.arpa" names ' .
+ 'to a specific server are still forwarded. If the IP to name is ' .
+ 'not known from /etc/hosts, DHCP or a specific domain override ' .
+ 'then a "not found" answer is immediately returned.') ?>
+
=gettext("Listen Port");?> |
- />
+ />
|
+
=gettext("The port used for responding to DNS queries. It should normally be left blank unless another service needs to bind to TCP/UDP port 53.");?>
@@ -357,28 +362,31 @@ $( document ).ready(function() {
- =gettext("Interface IPs used by the DNS Forwarder for responding to queries from clients. If an interface has both IPv4 and IPv6 IPs, both are used. Queries to other interface IPs not selected below are discarded. The default behavior is to respond to queries on every available IPv4 and IPv6 address.");?>
+ =gettext("Interface IPs used by Dnsmasq for responding to queries from clients. If an interface has both IPv4 and IPv6 IPs, both are used. Queries to other interface IPs not selected below are discarded. The default behavior is to respond to queries on every available IPv4 and IPv6 address.");?>
- + =gettext('Bind Mode') ?> |
+
/>
- =gettext("Strict Interface Binding");?>
- |
- = gettext("If this option is set, the DNS forwarder will only bind to the interfaces containing the IP addresses selected above, rather than binding to all interfaces and discarding queries to other addresses."); ?>
- - = gettext("NOTE: This option does NOT work with IPv6. If set, dnsmasq will not bind to IPv6 addresses."); ?> + = gettext('Strict Interface Binding') ?> +
+ = gettext("If this option is set, Dnsmasq will only bind to the interfaces containing the IP addresses selected above, rather than binding to all interfaces and discarding queries to other addresses."); ?>
+ = gettext("This option does not work with IPv6. If set, Dnsmasq will not bind to IPv6 addresses."); ?>
=gettext("Advanced");?> |
+ =gettext('Advanced') ?> |
- |
>
- " /> - =gettext("Show advanced option");?>
+ >
+
- >
- =gettext("Advanced");?> - - =gettext("Enter any additional options you would like to add to the dnsmasq configuration here, separated by a space or newline"); ?> + >
+
+
+
+ =gettext("Enter any additional options you would like to add to the Dnsmasq configuration here, separated by a space or newline"); ?>
- = sprintf(gettext("If the DNS forwarder is enabled, the DHCP".
+ = sprintf(gettext("If Dnsmasq is enabled, the DHCP".
" service (if enabled) will automatically serve the LAN IP".
" address as a DNS server to DHCP clients so they will use".
- " the forwarder. The DNS forwarder will use the DNS servers".
+ " the forwarder. Dnsmasq will use the DNS servers".
" entered in %sSystem: General setup%s".
" or those obtained via DHCP or PPP on WAN if the \"Allow".
" DNS server list to be overridden by DHCP/PPP on WAN\"".
diff --git a/src/www/services_dnsmasq_edit.php b/src/www/services_dnsmasq_edit.php
index 16fbf0e08..a074933c7 100644
--- a/src/www/services_dnsmasq_edit.php
+++ b/src/www/services_dnsmasq_edit.php
@@ -1,32 +1,32 @@
- Copyright (C) 2003-2004 Manuel Kasper |
=gettext("Enter IP addresses to be used by the system for DNS resolution. " .
- "These are also used for the DHCP service, DNS forwarder and for PPTP VPN clients."); ?>
+ "These are also used for the DHCP service, DNS services and for PPTP VPN clients."); ?>
=gettext("In addition, optionally select the gateway for each DNS server. " . @@ -411,7 +411,7 @@ include("head.inc");
= gettext("If this option is set, DNS servers " .
"assigned by a DHCP/PPP server on WAN will be used " .
- "for its own purposes (including the DNS forwarder). " .
+ "for their own purposes (including the DNS services). " .
"However, they will not be assigned to DHCP and PPTP " .
"VPN clients.") ?>
|