diff options
| author | Jose Luis Duran <jlduran@users.noreply.github.com> | 2016-07-31 09:33:11 -0300 |
|---|---|---|
| committer | Renato Botelho <renato@netgate.com> | 2016-08-04 18:25:31 -0300 |
| commit | 0b95ff4c5fdc4400a57fc3450decfae7096d7005 (patch) | |
| tree | 8bfbbd857b06a4d71433c600ece915287ffd3249 /src | |
| parent | e366c806406daf94e09b8be9918aa6515031c4ab (diff) | |
| download | pfsense-0b95ff4c5fdc4400a57fc3450decfae7096d7005.zip pfsense-0b95ff4c5fdc4400a57fc3450decfae7096d7005.tar.gz | |
services_dhcp: Ignore BOOTP queries
BOOTP leases do not have a maximum lease time by default, this could
potentially lead to a DHCP address pool exhaustion.
This commit adds an option to ignore BOOTP queries.
Redmine #4351
(cherry picked from commit 6d53301b1f612ff3e0490abbb46b53c50193b80b)
Diffstat (limited to 'src')
| -rw-r--r-- | src/etc/inc/services.inc | 5 | ||||
| -rw-r--r-- | src/usr/local/www/services_dhcp.php | 9 |
2 files changed, 14 insertions, 0 deletions
diff --git a/src/etc/inc/services.inc b/src/etc/inc/services.inc index 3147c3a..0fe612c 100644 --- a/src/etc/inc/services.inc +++ b/src/etc/inc/services.inc @@ -898,6 +898,11 @@ EOPP; $dhcpdconf .= " max-lease-time {$poolconf['maxleasetime']};\n"; } + // ignore bootp + if (isset($poolconf['ignorebootp'])) { + $dhcpdconf .= " ignore bootp;\n"; + } + // netbios-name* if (is_array($poolconf['winsserver']) && $poolconf['winsserver'][0] && ($poolconf['winsserver'][0] != $dhcpifconf['winsserver'][0])) { $dhcpdconf .= " option netbios-name-servers " . join(",", $poolconf['winsserver']) . ";\n"; diff --git a/src/usr/local/www/services_dhcp.php b/src/usr/local/www/services_dhcp.php index 7e692f6..ba2afff 100644 --- a/src/usr/local/www/services_dhcp.php +++ b/src/usr/local/www/services_dhcp.php @@ -199,6 +199,7 @@ if (is_array($dhcpdconf)) { $pconfig['domainsearchlist'] = $dhcpdconf['domainsearchlist']; list($pconfig['wins1'], $pconfig['wins2']) = $dhcpdconf['winsserver']; list($pconfig['dns1'], $pconfig['dns2'], $pconfig['dns3'], $pconfig['dns4']) = $dhcpdconf['dnsserver']; + $pconfig['ignorebootp'] = isset($dhcpdconf['ignorebootp']); $pconfig['denyunknown'] = isset($dhcpdconf['denyunknown']); $pconfig['nonak'] = isset($dhcpdconf['nonak']); $pconfig['ddnsdomain'] = $dhcpdconf['ddnsdomain']; @@ -564,6 +565,7 @@ if (isset($_POST['save'])) { $dhcpdconf['gateway'] = $_POST['gateway']; $dhcpdconf['domain'] = $_POST['domain']; $dhcpdconf['domainsearchlist'] = $_POST['domainsearchlist']; + $dhcpdconf['ignorebootp'] = ($_POST['ignorebootp']) ? true : false; $dhcpdconf['denyunknown'] = ($_POST['denyunknown']) ? true : false; $dhcpdconf['nonak'] = ($_POST['nonak']) ? true : false; $dhcpdconf['ddnsdomain'] = $_POST['ddnsdomain']; @@ -795,6 +797,13 @@ if (!is_numeric($pool) && !($act == "newpool")) { } $section->addInput(new Form_Checkbox( + 'ignorebootp', + 'BOOTP', + 'Ignore BOOTP queries', + $pconfig['ignorebootp'] +)); + +$section->addInput(new Form_Checkbox( 'denyunknown', 'Deny unknown clients', 'Only the clients defined below will get DHCP leases from this server.', |
