summaryrefslogtreecommitdiffstats
path: root/etc
diff options
context:
space:
mode:
authorjim-p <jimp@pfsense.org>2013-07-02 16:54:25 -0400
committerjim-p <jimp@pfsense.org>2013-07-02 16:58:33 -0400
commitb54ffacc756d39f6d03f287bbc9ab3ccd70793c0 (patch)
tree2542c699264428b67da195c941a752ec13ca228c /etc
parent0d7e24784f7717dd30138d52c7a97488cb19cc89 (diff)
downloadpfsense-b54ffacc756d39f6d03f287bbc9ab3ccd70793c0.zip
pfsense-b54ffacc756d39f6d03f287bbc9ab3ccd70793c0.tar.gz
Include RFC2136 hosts in DNS rebinding checks.
Diffstat (limited to 'etc')
-rw-r--r--etc/inc/auth.inc7
1 files changed, 7 insertions, 0 deletions
diff --git a/etc/inc/auth.inc b/etc/inc/auth.inc
index afddc5b..67451a2 100644
--- a/etc/inc/auth.inc
+++ b/etc/inc/auth.inc
@@ -86,6 +86,13 @@ if (function_exists("display_error_form") && !isset($config['system']['webgui'][
break;
}
+ if(is_array($config['dnsupdates']['dnsupdate']) && !$found_host)
+ foreach($config['dnsupdates']['dnsupdate'] as $rfc2136)
+ if(strcasecmp($rfc2136['host'], $http_host) == 0) {
+ $found_host = true;
+ break;
+ }
+
if(!empty($config['system']['webgui']['althostnames']) && !$found_host) {
$althosts = explode(" ", $config['system']['webgui']['althostnames']);
foreach ($althosts as $ah)
OpenPOWER on IntegriCloud