summaryrefslogtreecommitdiffstats
path: root/src/etc/inc/unbound.inc
Commit message (Collapse)AuthorAgeFilesLines
* Fix typojim-p2017-07-131-2/+2
|
* Restructure how unbound zone data is written to fix processing of "redirect" ↵jim-p2017-07-131-19/+66
| | | | | | | zone entries. Fixes #7690 Also corrects some other misc issues for formatting of zone data. While here, add an option, not exposed in the GUI, for users to get the previous behavior of defining short names for hosts.
* unbound-control needs to know the config path or else it can't work ↵jim-p2017-06-291-2/+2
| | | | properly. Fixes #7667
* Make the changes suggested by jim-p and changed the way the disable function ↵Robbert Rijkse2017-05-091-20/+15
| | | | work to ensure the manually added host entries or DHCP reservations still work.
* Unbound: Added ability to disable automatically added host entriesRobbert Rijkse2017-05-061-21/+29
|
* Fix #6712Renato Botelho2017-01-111-1/+1
| | | | Use system_hosts_entries to generate unbound host_entries.conf
* Ticket #6712: Deprecate read_hosts()Renato Botelho2017-01-111-30/+1
| | | | Read local items from system_hosts_local_entries()
* Fix #3560 correctly handle disabled static routesPhil Davis2016-12-271-1/+1
| | | | | | | | | | | | | | | | | | | | | 1) util.inc - add parameter to get_staticroutes() so the caller can choose to see all static routes or only the ones that are currently enabled. 2) filter.inc - just process enabled static routes when making direct networks list, tonathosts etc. 3) services.inc - only include enabled static routes when making confogs for DHCP(6) Relay. 4) unbound.inc - only include enable static routes in unbound_acls_config 5) rc.newroutedns - only trigger if there is an enabled static route. Note: GUI validation has been left as-is. e.g. in system_gateways we don not allow to delete a gateway if there is a disabled static route using it... If people want to delete "higher level" stuff, then they need to first delete the disabled static route(s). Otherwise it will get rather "risky" having disabled static routes in the config that refer to gateways that no longer exist, or have a subnet range that now matches a local interafce or...
* Unbound - add support for "deny_non_local" and "refuse_non_local" ACLs ↵doktornotor2016-12-181-0/+4
| | | | (Feature #6914)
* Move copyright from ESF to NetgateRenato Botelho2016-09-061-1/+1
|
* Move to Apache License 2.0Renato Botelho2016-07-151-41/+9
|
* Review license / copyright on all files (final round)Renato Botelho2016-07-151-2/+2
|
* Review license / copyright on all files (1st round)Renato Botelho2016-07-141-55/+55
|
* Omit non-qualified hostnames from unbound's local-data. Ticket #6064Chris Buechler2016-07-081-3/+0
|
* Switch domain overrides from stub-zone to forward-zone. Ticket #6065Chris Buechler2016-04-211-3/+2
|
* Fix unbound.inc so zero value for *_num_tcp is honoredlukehamburg2016-02-291-2/+2
| | | | In the Unbound documentation, it is noted that setting "outgoing-num-tcp" to "0" disables TCP queries. In testing I noticed that although I could select & save a value of "0" in the Unbound Advanced Config, the actual value written to /var/unbound/unbound.conf was still the default "10". Apparently in PHP, a value of "0" still tests "false" for !empty(). Changing the test to isset() seems to fix the issue.
* Don't include 127.0.0.0/8 in unbound.conf in forward mode. Ticket #5750Chris Buechler2016-02-061-1/+3
|
* Remove unnecessary checks. Code prevents var from being empty.NOYB2016-01-251-1/+1
| | | | Wrap var in string with braces.
* Move unbound local zone types array to function in unbound.inc.NOYB2016-01-251-3/+19
| | | | Protect against breaking the system; check for valid unbound local zone type rather than just the setting existence.
* Update license on files from /etc/incRenato Botelho2016-01-151-14/+43
|
* Fix #5767 config validation errors when first enabling DNS ResolverPhil Davis2016-01-131-47/+62
| | | | | | Generate a complete set of test conf files in /var/unbound/test subdir when doing the validation of the tentative config that is being saved. This avoids any dependency on any of the "real" files already existing in /var/unbound and also avoids the chance of overwriting a live file that is currently in use by the running unbound. /var/unbound/test is removed once the validation has been done. The real unbound conf files are created in /var/unbound like they always were after the user presses apply.
* Remove all pfSense_MODULE and pfSense_BUILDER_BINARIES definitions, whatever ↵Renato Botelho2015-12-151-4/+0
| | | | was the reason they were added, it was never finished and it's not being used
* Services - DNS Resolver - System Domain Local Zone Type OptionNOYB2015-12-011-1/+7
| | | | Expose system domain unbound local-zone type to be configurable.
* It is not necessary to omit link-local for unbound. Ticket #4021Luiz Otavio O Souza2015-11-241-3/+1
|
* Now that the issue in 4062 is fixed, no need to omit link local here. Ticket ↵Chris Buechler2015-11-241-6/+1
| | | | #4021
* Bind to IP aliases correctly in Unbound. Ticket #5464Chris Buechler2015-11-211-1/+6
|
* unbound_statistics section should be written to unbound.confPhil Davis2015-11-101-3/+3
| | | | | | The stuff generated by unbound_statistics() goes into unbound.conf It had got separated out and was going nowhere. This puts the behavior back the way it was yesterday. Note: There is a separate issue about this because the UI has no place to actually select the statistics settings. There is some upgrade code that looks like it was converting statistics settings from the old Unbound package into custom commands in the integrated Unbound. So it looks like the unbound_statistics() function can/should be removed???
* Add global so that unbound.conf gets writtenPhil Davis2015-11-101-0/+1
| | | to the correct place based on $g setting.
* Rearrange calls in unbound.inc so config text can be generated without ↵Matt Smith2015-11-091-44/+69
| | | | writing the actual file and a syntax check can be run. Rearrange services_unbound.php to wait until input checking is complete before saving things to global config and run syntax check as part of input checking. Implements #4411.
* Check unbound root.key file contents, and remove it if invalid, before ↵Chris Buechler2015-10-211-0/+9
| | | | unbound-anchor runs otherwise it will fail and unbound will fail to start. fsync the file after writing to prevent the problem. Ticket #5334
* Move main pfSense content to src/Renato Botelho2015-08-251-0/+717
OpenPOWER on IntegriCloud