diff options
| author | Chris Buechler <cmb@pfsense.org> | 2014-11-27 22:10:48 -0600 |
|---|---|---|
| committer | Chris Buechler <cmb@pfsense.org> | 2014-11-27 22:10:48 -0600 |
| commit | f8f5ba1a1f9f15b3fc7e1fb3a806ed40daeb9023 (patch) | |
| tree | 776cca7ecee2f252453586a6696f927c0a38ddc2 /usr/local/www/services_unbound_advanced.php | |
| parent | 5d4b88306803580646d2e6cfcf11535e6899a387 (diff) | |
| download | pfsense-f8f5ba1a1f9f15b3fc7e1fb3a806ed40daeb9023.zip pfsense-f8f5ba1a1f9f15b3fc7e1fb3a806ed40daeb9023.tar.gz | |
Add option to disable auto-added access-control entries for users who want to manually manage ACLs. Ticket #4023
Diffstat (limited to 'usr/local/www/services_unbound_advanced.php')
| -rw-r--r-- | usr/local/www/services_unbound_advanced.php | 15 |
1 files changed, 14 insertions, 1 deletions
diff --git a/usr/local/www/services_unbound_advanced.php b/usr/local/www/services_unbound_advanced.php index a6392e8..279e7a4 100644 --- a/usr/local/www/services_unbound_advanced.php +++ b/usr/local/www/services_unbound_advanced.php @@ -79,6 +79,10 @@ $pconfig['infra_cache_numhosts'] = isset($config['unbound']['infra_cache_numhost $pconfig['unwanted_reply_threshold'] = isset($config['unbound']['unwanted_reply_threshold']) ? $config['unbound']['unwanted_reply_threshold'] : 'disabled'; $pconfig['log_verbosity'] = isset($config['unbound']['log_verbosity']) ? $config['unbound']['log_verbosity'] : "1"; +if (isset($config['unbound']['disable_auto_added_access_control'])) { + $pconfig['disable_auto_added_access_control'] = true; +} + if ($_POST) { $pconfig = $_POST; @@ -132,6 +136,11 @@ if ($_POST) { $config['unbound']['infra_cache_numhosts'] = $_POST['infra_cache_numhosts']; $config['unbound']['unwanted_reply_threshold'] = $_POST['unwanted_reply_threshold']; $config['unbound']['log_verbosity'] = $_POST['log_verbosity']; + if (isset($_POST['disable_auto_added_access_control'])) { + $config['unbound']['disable_auto_added_access_control'] = true; + } else { + unset($config['unbound']['disable_auto_added_access_control']); + } write_config("DNS Resolver configured."); mark_subsystem_dirty('unbound'); @@ -404,7 +413,11 @@ include_once("head.inc"); </td> </tr> <tr> - <td colspan="2"> </td> + <td width="22%" valign="top" class="vncell"><?=gettext("Disable auto-added access control");?></td> + <td width="78%" class="vtable"> + <input name="disable_auto_added_access_control" type="checkbox" id="disable_auto_added_access_control" value="yes" <?php if (isset($pconfig['disable_auto_added_access_control'])) echo "checked=\"checked\"";?> /> + <?=gettext("Check this box to disable the automatically-added access control entries. By default, IPv4 and IPv6 networks residing on internal interfaces of this system are permitted. Allowed networks must be manually configured on the Access Lists tab if the auto-added entries are disabled.");?> + </td> </tr> <tr> <td width="22%"></td> |
