diff options
author | doktornotor <notordoktor@gmail.com> | 2016-12-18 15:12:28 +0100 |
---|---|---|
committer | GitHub <noreply@github.com> | 2016-12-18 15:12:28 +0100 |
commit | 6ff48cf16b4264f6554feffcf35ec2eaea4bce16 (patch) | |
tree | 3e5443a2e519e3d4e451084423e05d4c07139d89 /src/usr | |
parent | 6a827f6959fc34972e532516a6a414e1cdf87714 (diff) | |
download | pfsense-6ff48cf16b4264f6554feffcf35ec2eaea4bce16.zip pfsense-6ff48cf16b4264f6554feffcf35ec2eaea4bce16.tar.gz |
Unbound - add support for "deny_non_local" and "refuse_non_local" ACLs (Feature #6914)
Diffstat (limited to 'src/usr')
-rw-r--r-- | src/usr/local/www/services_unbound_acls.php | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/src/usr/local/www/services_unbound_acls.php b/src/usr/local/www/services_unbound_acls.php index bec6357..1174202 100644 --- a/src/usr/local/www/services_unbound_acls.php +++ b/src/usr/local/www/services_unbound_acls.php @@ -169,7 +169,9 @@ $actionHelp = sprintf(gettext('%sDeny:%s Stops queries from hosts within the netblock defined below.%s'), '<span class="text-success"><strong>', '</strong></span>', '<br />') . sprintf(gettext('%sRefuse:%s Stops queries from hosts within the netblock defined below, but sends a DNS rcode REFUSED error message back to the client.%s'), '<span class="text-success"><strong>', '</strong></span>', '<br />') . sprintf(gettext('%sAllow:%s Allow queries from hosts within the netblock defined below.%s'), '<span class="text-success"><strong>', '</strong></span>', '<br />') . - sprintf(gettext('%sAllow Snoop:%s Allow recursive and nonrecursive access from hosts within the netblock defined below. Used for cache snooping and ideally should only be configured for the administrative host.'), '<span class="text-success"><strong>', '</strong></span>'); + sprintf(gettext('%sAllow Snoop:%s Allow recursive and nonrecursive access from hosts within the netblock defined below. Used for cache snooping and ideally should only be configured for the administrative host.%s'), '<span class="text-success"><strong>', '</strong></span>', '<br />') . + sprintf(gettext('%sDeny Nonlocal:%s Allow only authoritative local-data queries from hosts within the netblock defined below. Messages that are disallowed are dropped.%s'), '<span class="text-success"><strong>', '</strong></span>', '<br />') . + sprintf(gettext('%sRefuse Nonlocal:%s Allow only authoritative local-data queries from hosts within the netblock defined below. Sends a DNS rcode REFUSED error message back to the client for messages that are disallowed.'), '<span class="text-success"><strong>', '</strong></span>'); $pgtitle = array(gettext("Services"), gettext("DNS Resolver"), gettext("Access Lists")); @@ -228,7 +230,7 @@ if ($act == "new" || $act == "edit") { 'aclaction', 'Action', strtolower($pconfig['aclaction']), - array('allow' => gettext('Allow'), 'deny' => gettext('Deny'), 'refuse' => gettext('Refuse'), 'allow snoop' => gettext('Allow Snoop')) + array('allow' => gettext('Allow'), 'deny' => gettext('Deny'), 'refuse' => gettext('Refuse'), 'allow snoop' => gettext('Allow Snoop'), 'deny nonlocal' => gettext('Deny Nonlocal'), 'refuse nonlocal' => gettext('Refuse Nonlocal')) ))->setHelp($actionHelp); $section->addInput(new Form_Input( |