summaryrefslogtreecommitdiffstats
path: root/src/usr
diff options
context:
space:
mode:
authordoktornotor <notordoktor@gmail.com>2016-12-18 15:12:28 +0100
committerGitHub <noreply@github.com>2016-12-18 15:12:28 +0100
commit6ff48cf16b4264f6554feffcf35ec2eaea4bce16 (patch)
tree3e5443a2e519e3d4e451084423e05d4c07139d89 /src/usr
parent6a827f6959fc34972e532516a6a414e1cdf87714 (diff)
downloadpfsense-6ff48cf16b4264f6554feffcf35ec2eaea4bce16.zip
pfsense-6ff48cf16b4264f6554feffcf35ec2eaea4bce16.tar.gz
Unbound - add support for "deny_non_local" and "refuse_non_local" ACLs (Feature #6914)
Diffstat (limited to 'src/usr')
-rw-r--r--src/usr/local/www/services_unbound_acls.php6
1 files changed, 4 insertions, 2 deletions
diff --git a/src/usr/local/www/services_unbound_acls.php b/src/usr/local/www/services_unbound_acls.php
index bec6357..1174202 100644
--- a/src/usr/local/www/services_unbound_acls.php
+++ b/src/usr/local/www/services_unbound_acls.php
@@ -169,7 +169,9 @@ $actionHelp =
sprintf(gettext('%sDeny:%s Stops queries from hosts within the netblock defined below.%s'), '<span class="text-success"><strong>', '</strong></span>', '<br />') .
sprintf(gettext('%sRefuse:%s Stops queries from hosts within the netblock defined below, but sends a DNS rcode REFUSED error message back to the client.%s'), '<span class="text-success"><strong>', '</strong></span>', '<br />') .
sprintf(gettext('%sAllow:%s Allow queries from hosts within the netblock defined below.%s'), '<span class="text-success"><strong>', '</strong></span>', '<br />') .
- sprintf(gettext('%sAllow Snoop:%s Allow recursive and nonrecursive access from hosts within the netblock defined below. Used for cache snooping and ideally should only be configured for the administrative host.'), '<span class="text-success"><strong>', '</strong></span>');
+ sprintf(gettext('%sAllow Snoop:%s Allow recursive and nonrecursive access from hosts within the netblock defined below. Used for cache snooping and ideally should only be configured for the administrative host.%s'), '<span class="text-success"><strong>', '</strong></span>', '<br />') .
+ sprintf(gettext('%sDeny Nonlocal:%s Allow only authoritative local-data queries from hosts within the netblock defined below. Messages that are disallowed are dropped.%s'), '<span class="text-success"><strong>', '</strong></span>', '<br />') .
+ sprintf(gettext('%sRefuse Nonlocal:%s Allow only authoritative local-data queries from hosts within the netblock defined below. Sends a DNS rcode REFUSED error message back to the client for messages that are disallowed.'), '<span class="text-success"><strong>', '</strong></span>');
$pgtitle = array(gettext("Services"), gettext("DNS Resolver"), gettext("Access Lists"));
@@ -228,7 +230,7 @@ if ($act == "new" || $act == "edit") {
'aclaction',
'Action',
strtolower($pconfig['aclaction']),
- array('allow' => gettext('Allow'), 'deny' => gettext('Deny'), 'refuse' => gettext('Refuse'), 'allow snoop' => gettext('Allow Snoop'))
+ array('allow' => gettext('Allow'), 'deny' => gettext('Deny'), 'refuse' => gettext('Refuse'), 'allow snoop' => gettext('Allow Snoop'), 'deny nonlocal' => gettext('Deny Nonlocal'), 'refuse nonlocal' => gettext('Refuse Nonlocal'))
))->setHelp($actionHelp);
$section->addInput(new Form_Input(
OpenPOWER on IntegriCloud