lucaspalomodevelop/opnsense-core
1
0
Fork 0
mirror of https://github.com/lucaspalomodevelop/opnsense-core.git synced 2026-03-13 00:07:27 +00:00
Code Issues Packages Projects Releases Wiki Activity

dnsmasq: Add add-mac, add-subnet and strip-subnet options to general settings (#8447)

Browse Source
This commit is contained in:
Monviech 2025-03-17 13:16:28 +01:00 committed by GitHub
parent d55ecc6ebe
commit d2b78e1639
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
3 changed files with 41 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
src/opnsense/mvc/app/controllers/OPNsense/Dnsmasq/forms/general.xml
View File

@ -106,6 +106,27 @@
<type>checkbox</type>
<help>If this option is set, we will not forward reverse DNS lookups (PTR) for private addresses (RFC 1918) to upstream name servers. Any entries in the Domain Overrides section forwarding private "n.n.n.in-addr.arpa" names to a specific server are still forwarded. If the IP to name is not known from /etc/hosts, DHCP or a specific domain override then a "not found" answer is immediately returned.</help>
</field>
<field>
<id>dnsmasq.add_mac</id>
<label>Add MAC</label>
<type>dropdown</type>
<help>Add the MAC address of the requestor to DNS queries which are forwarded upstream. The MAC address will only be added if the upstream DNS Server is in the same subnet as the requestor. Since this is not standardized, it should be considered experiemental. This is useful for selective DNS filtering on the upstream DNS server.</help>
<advanced>true</advanced>
</field>
<field>
<id>dnsmasq.add_subnet</id>
<label>Add subnet</label>
<type>checkbox</type>
<help>Add the real client IPv4 and IPv6 addresses (add-subnet=32,128) to DNS queries which are forwarded upstream. Be careful setting this option as it can undermine privacy. This is useful for selective DNS filtering on the upstream DNS server.</help>
<advanced>true</advanced>
</field>
<field>
<id>dnsmasq.strip_subnet</id>
<label>Strip subnet</label>
<type>checkbox</type>
<help>Strip the subnet received by a downstream DNS server. If add_subnet is used and the downstream DNS server already added a subnet, DNSMasq will not replace it without setting strip_subnet.</help>
<advanced>true</advanced>
</field>
<field>
<type>header</type>
<label>DHCP</label>

9
src/opnsense/mvc/app/models/OPNsense/Dnsmasq/Dnsmasq.xml
View File

@ -33,6 +33,15 @@
<local_ttl type="IntegerField">
<MinimumValue>0</MinimumValue>
</local_ttl>
<add_mac type="OptionField">
<OptionValues>
<default>default</default>
<base64>base64</base64>
<text>text</text>
</OptionValues>
</add_mac>
<add_subnet type="BooleanField"/>
<strip_subnet type="BooleanField"/>
<dhcp>
<no_interface type="InterfaceField">
<Multiple>Y</Multiple>

11
src/opnsense/service/templates/OPNsense/Dnsmasq/dnsmasq.conf
View File

@ -54,6 +54,17 @@ dhcp-reply-delay={{dnsmasq.dhcp.reply_delay}}
bind-interfaces
{% endif %}
{% if dnsmasq.add_mac %}
add-mac{% if dnsmasq.add_mac != 'default' %}={{dnsmasq.add_mac}}{% endif %}
{% endif %}
{% if dnsmasq.add_subnet %}
add-subnet=32,128
{% endif %}
{% if dnsmasq.strip_subnet %}
strip-subnet
{% endif %}
{% if dnsmasq.no_private_reverse == '1' %}
# Never forward addresses in the non-routed address spaces.