summaryrefslogtreecommitdiffstats
path: root/src/etc/inc/unbound.inc
Commit message (Collapse)AuthorAgeFilesLines
* Fix #6712Renato Botelho2017-01-111-1/+1
| | | | Use system_hosts_entries to generate unbound host_entries.conf
* Ticket #6712: Deprecate read_hosts()Renato Botelho2017-01-111-30/+1
| | | | Read local items from system_hosts_local_entries()
* Fix #3560 correctly handle disabled static routesPhil Davis2016-12-271-1/+1
| | | | | | | | | | | | | | | | | | | | | | | 1) util.inc - add parameter to get_staticroutes() so the caller can choose to see all static routes or only the ones that are currently enabled. 2) filter.inc - just process enabled static routes when making direct networks list, tonathosts etc. 3) services.inc - only include enabled static routes when making confogs for DHCP(6) Relay. 4) unbound.inc - only include enable static routes in unbound_acls_config 5) rc.newroutedns - only trigger if there is an enabled static route. Note: GUI validation has been left as-is. e.g. in system_gateways we don not allow to delete a gateway if there is a disabled static route using it... If people want to delete "higher level" stuff, then they need to first delete the disabled static route(s). Otherwise it will get rather "risky" having disabled static routes in the config that refer to gateways that no longer exist, or have a subnet range that now matches a local interafce or... (cherry picked from commit cf08b49e20810a0aa953561892b1d5bee353957e)
* Unbound - add support for "deny_non_local" and "refuse_non_local" ACLs ↵doktornotor2016-12-201-0/+4
| | | | | | (Feature #6914) (cherry picked from commit 6a827f6959fc34972e532516a6a414e1cdf87714)
* Move copyright from ESF to NetgateRenato Botelho2016-09-061-1/+1
|
* Review license / copyright on all files (final round)Renato Botelho2016-07-151-2/+2
|
* Review license / copyright on all files (1st round)Renato Botelho2016-07-141-55/+55
|
* Leave this to 2.4 only for now. Revert "Omit non-qualified hostnames from ↵Chris Buechler2016-07-081-0/+3
| | | | | | unbound's local-data. Ticket #6064" This reverts commit cde0ef17a60cffa4a54f3ab4922b77bc0447d068.
* Omit non-qualified hostnames from unbound's local-data. Ticket #6064Chris Buechler2016-07-081-3/+0
|
* Switch domain overrides from stub-zone to forward-zone. Ticket #6065Chris Buechler2016-04-211-3/+2
|
* Fix unbound.inc so zero value for *_num_tcp is honoredlukehamburg2016-02-291-2/+2
| | | | In the Unbound documentation, it is noted that setting "outgoing-num-tcp" to "0" disables TCP queries. In testing I noticed that although I could select & save a value of "0" in the Unbound Advanced Config, the actual value written to /var/unbound/unbound.conf was still the default "10". Apparently in PHP, a value of "0" still tests "false" for !empty(). Changing the test to isset() seems to fix the issue.
* Don't include 127.0.0.0/8 in unbound.conf in forward mode. Ticket #5750Chris Buechler2016-02-061-1/+3
|
* Remove unnecessary checks. Code prevents var from being empty.NOYB2016-01-251-1/+1
| | | | Wrap var in string with braces.
* Move unbound local zone types array to function in unbound.inc.NOYB2016-01-251-3/+19
| | | | Protect against breaking the system; check for valid unbound local zone type rather than just the setting existence.
* Update license on files from /etc/incRenato Botelho2016-01-151-14/+43
|
* Fix #5767 config validation errors when first enabling DNS ResolverPhil Davis2016-01-131-47/+62
| | | | | | Generate a complete set of test conf files in /var/unbound/test subdir when doing the validation of the tentative config that is being saved. This avoids any dependency on any of the "real" files already existing in /var/unbound and also avoids the chance of overwriting a live file that is currently in use by the running unbound. /var/unbound/test is removed once the validation has been done. The real unbound conf files are created in /var/unbound like they always were after the user presses apply.
* Remove all pfSense_MODULE and pfSense_BUILDER_BINARIES definitions, whatever ↵Renato Botelho2015-12-151-4/+0
| | | | was the reason they were added, it was never finished and it's not being used
* Services - DNS Resolver - System Domain Local Zone Type OptionNOYB2015-12-011-1/+7
| | | | Expose system domain unbound local-zone type to be configurable.
* It is not necessary to omit link-local for unbound. Ticket #4021Luiz Otavio O Souza2015-11-241-3/+1
|
* Now that the issue in 4062 is fixed, no need to omit link local here. Ticket ↵Chris Buechler2015-11-241-6/+1
| | | | #4021
* Bind to IP aliases correctly in Unbound. Ticket #5464Chris Buechler2015-11-211-1/+6
|
* unbound_statistics section should be written to unbound.confPhil Davis2015-11-101-3/+3
| | | | | | The stuff generated by unbound_statistics() goes into unbound.conf It had got separated out and was going nowhere. This puts the behavior back the way it was yesterday. Note: There is a separate issue about this because the UI has no place to actually select the statistics settings. There is some upgrade code that looks like it was converting statistics settings from the old Unbound package into custom commands in the integrated Unbound. So it looks like the unbound_statistics() function can/should be removed???
* Add global so that unbound.conf gets writtenPhil Davis2015-11-101-0/+1
| | | to the correct place based on $g setting.
* Rearrange calls in unbound.inc so config text can be generated without ↵Matt Smith2015-11-091-44/+69
| | | | writing the actual file and a syntax check can be run. Rearrange services_unbound.php to wait until input checking is complete before saving things to global config and run syntax check as part of input checking. Implements #4411.
* Check unbound root.key file contents, and remove it if invalid, before ↵Chris Buechler2015-10-211-0/+9
| | | | unbound-anchor runs otherwise it will fail and unbound will fail to start. fsync the file after writing to prevent the problem. Ticket #5334
* Move main pfSense content to src/Renato Botelho2015-08-251-0/+717
OpenPOWER on IntegriCloud