Make sure ACLs are saved correctly

1 files changed, 28 insertions, 4 deletions

diff --git a/etc/inc/unbound.inc b/etc/inc/unbound.inc
index 8fcf7b0..008f845 100644
--- a/etc/inc/unbound.inc
+++ b/etc/inc/unbound.inc
@@ -133,14 +133,17 @@ EOF;
     }
 
     // Configure static Host entries
-    $host_entries = unbound_add_host_entries();
+    unbound_add_host_entries();
 
     // Configure Domain Overrides
-    $domain_overrides = unbound_add_domain_overrides();
+    unbound_add_domain_overrides();
 
     // Configure Unbound statistics
     $statistics = unbound_statistics();
 
+    // Configure Unbound access-lists
+    unbound_acls_config();
+
     // Add custom Unbound options
     if ($config['unbound']['custom_options']) {
         $custom_option = "# Unbound custom option";
@@ -322,8 +325,8 @@ function sync_unbound_service() {
 function unbound_acl_id_used($id) {
     global $config;
 
-    if (is_array($config['installedpackages']['unboundacls']['config']))
-        foreach ($config['installedpackages']['unboundacls']['config'] as & $acls)
+    if (is_array($config['unbound']['acls']))
+        foreach($config['unbound']['acls'] as & $acls)
             if ($id == $acls['aclid'])
                 return true;
 
@@ -585,4 +588,25 @@ EOF;
     return $stats;
 }
 
+// Unbound Access lists
+function unbound_acls_config() {
+    global $config;
+
+    // Configure the ACLs
+    if (is_array($config['unbound']['acls'])) {
+        $unboundcfg = "";
+        foreach($config['unbound']['acls'] as $unbound_acl) {
+            $unboundcfg .= "#{$unbound_acl['aclname']}\n";
+            foreach($unbound_acl['row'] as $network) {
+                if ($unbound_acl['aclaction'] == "allow snoop")
+                    $unbound_acl['aclaction'] = "allow_snoop";
+                $unboundcfg .= "access-control: {$network['acl_network']}/{$network['mask']} {$unbound_acl['aclaction']}\n";
+            }
+        }
+        // Write out Access list
+        file_put_contents("{$g['unbound_chroot_path']}/access_lists.conf", $unboundcfg);
+    } else
+        return;
+}
+
 ?>
\ No newline at end of file