diff --git a/dns/bind/Makefile b/dns/bind/Makefile new file mode 100644 index 000000000..54ccdddfb --- /dev/null +++ b/dns/bind/Makefile @@ -0,0 +1,8 @@ +PLUGIN_NAME= bind +PLUGIN_VERSION= 0.1 +PLUGIN_COMMENT= BIND domain name service +PLUGIN_DEPENDS= bind913 +PLUGIN_MAINTAINER= m.muenz@gmail.com +PLUGIN_DEVEL= yes + +.include "../../Mk/plugins.mk" diff --git a/dns/bind/pkg-descr b/dns/bind/pkg-descr new file mode 100644 index 000000000..2d2daa1fb --- /dev/null +++ b/dns/bind/pkg-descr @@ -0,0 +1,7 @@ +BIND implements the DNS protocols. The DNS protocols are part of +the core Internet standards. They specify the process by which +one computer can find another computer on the basis of its name. +The BIND software distribution contains all of the software +necessary for asking and answering name service questions. + +WWW: https://www.isc.org diff --git a/dns/bind/src/etc/inc/plugins.inc.d/bind.inc b/dns/bind/src/etc/inc/plugins.inc.d/bind.inc new file mode 100644 index 000000000..7db3d9b58 --- /dev/null +++ b/dns/bind/src/etc/inc/plugins.inc.d/bind.inc @@ -0,0 +1,55 @@ +enabled == '1'; +} + +function bind_services() +{ + $services = array(); + + if (!bind_enabled()) { + return $services; + } + + $services[] = array( + 'description' => gettext('BIND Daemon'), + 'configd' => array( + 'restart' => array('bind restart'), + 'start' => array('bind start'), + 'stop' => array('bind stop'), + ), + 'name' => 'named', + 'pidfile' => '/var/run/named/pid' + ); + + return $services; +} diff --git a/dns/bind/src/opnsense/mvc/app/controllers/OPNsense/Bind/Api/ACLController.php b/dns/bind/src/opnsense/mvc/app/controllers/OPNsense/Bind/Api/ACLController.php new file mode 100644 index 000000000..856b923c4 --- /dev/null +++ b/dns/bind/src/opnsense/mvc/app/controllers/OPNsense/Bind/Api/ACLController.php @@ -0,0 +1,64 @@ +searchBase('acls.acl', array("enabled", "name", "networks")); + } + public function getACLAction($uuid = null) + { + $this->sessionClose(); + return $this->getBase('acl', 'acls.acl', $uuid); + } + public function addACLAction() + { + return $this->addBase('acl', 'acls.acl'); + } + public function delACLAction($uuid) + { + return $this->delBase('acls.acl', $uuid); + } + public function setACLAction($uuid) + { + return $this->setBase('acl', 'acls.acl', $uuid); + } + public function toggleACLAction($uuid) + { + return $this->toggleBase('acls.acl', $uuid); + } +} diff --git a/dns/bind/src/opnsense/mvc/app/controllers/OPNsense/Bind/Api/GeneralController.php b/dns/bind/src/opnsense/mvc/app/controllers/OPNsense/Bind/Api/GeneralController.php new file mode 100644 index 000000000..8c971205f --- /dev/null +++ b/dns/bind/src/opnsense/mvc/app/controllers/OPNsense/Bind/Api/GeneralController.php @@ -0,0 +1,39 @@ +view->generalForm = $this->getForm("general"); + $this->view->formDialogEditBindACL = $this->getForm("dialogEditBindACL"); + $this->view->pick('OPNsense/Bind/general'); + } +} diff --git a/dns/bind/src/opnsense/mvc/app/controllers/OPNsense/Bind/forms/dialogEditBindACL.xml b/dns/bind/src/opnsense/mvc/app/controllers/OPNsense/Bind/forms/dialogEditBindACL.xml new file mode 100644 index 000000000..c031a3cf4 --- /dev/null +++ b/dns/bind/src/opnsense/mvc/app/controllers/OPNsense/Bind/forms/dialogEditBindACL.xml @@ -0,0 +1,20 @@ +
+ + acl.enabled + + checkbox + This will enable or disable the ACL. + + + acl.name + + text + Set the name for this ACL. + + + acl.networks + + text + List of networks for this ACL. + +
diff --git a/dns/bind/src/opnsense/mvc/app/controllers/OPNsense/Bind/forms/general.xml b/dns/bind/src/opnsense/mvc/app/controllers/OPNsense/Bind/forms/general.xml new file mode 100644 index 000000000..151df0a46 --- /dev/null +++ b/dns/bind/src/opnsense/mvc/app/controllers/OPNsense/Bind/forms/general.xml @@ -0,0 +1,24 @@ +
+ + general.enabled + + checkbox + This will activate the BIND daemon. + + + general.listenv4 + + + select_multiple + true + Set the IPv4 addresses the service should listen to. + + + general.listenv6 + + + select_multiple + true + Set the IPv6 addresses the service should listen to. + +
diff --git a/dns/bind/src/opnsense/mvc/app/models/OPNsense/Bind/ACL.php b/dns/bind/src/opnsense/mvc/app/models/OPNsense/Bind/ACL.php new file mode 100644 index 000000000..f5f03fd7d --- /dev/null +++ b/dns/bind/src/opnsense/mvc/app/models/OPNsense/Bind/ACL.php @@ -0,0 +1,31 @@ + + //OPNsense/bind/acl + BIND ACL configuration + 1.0.0 + + + + + 1 + Y + + + + Y + /^([0-9a-zA-Z]){1,32}$/u + Should be a string between 1 and 32 characters. Allowed characters are 0-9a-zA-Z + + + + ; + Y + + + + + diff --git a/dns/bind/src/opnsense/mvc/app/models/OPNsense/Bind/ACL/ACL.xml b/dns/bind/src/opnsense/mvc/app/models/OPNsense/Bind/ACL/ACL.xml new file mode 100644 index 000000000..83205c526 --- /dev/null +++ b/dns/bind/src/opnsense/mvc/app/models/OPNsense/Bind/ACL/ACL.xml @@ -0,0 +1,9 @@ + + + Services: BIND + + ui/bind/* + api/bind/* + + + diff --git a/dns/bind/src/opnsense/mvc/app/models/OPNsense/Bind/General.php b/dns/bind/src/opnsense/mvc/app/models/OPNsense/Bind/General.php new file mode 100644 index 000000000..6084a14be --- /dev/null +++ b/dns/bind/src/opnsense/mvc/app/models/OPNsense/Bind/General.php @@ -0,0 +1,35 @@ + + //OPNsense/bind/general + BIND configuration + 1.0.0 + + + 0 + Y + + + ; + N + + + ; + N + + + diff --git a/dns/bind/src/opnsense/mvc/app/models/OPNsense/Bind/Menu/Menu.xml b/dns/bind/src/opnsense/mvc/app/models/OPNsense/Bind/Menu/Menu.xml new file mode 100644 index 000000000..821d6bf61 --- /dev/null +++ b/dns/bind/src/opnsense/mvc/app/models/OPNsense/Bind/Menu/Menu.xml @@ -0,0 +1,5 @@ + + + + + diff --git a/dns/bind/src/opnsense/mvc/app/views/OPNsense/Bind/general.volt b/dns/bind/src/opnsense/mvc/app/views/OPNsense/Bind/general.volt new file mode 100644 index 000000000..c3d99d953 --- /dev/null +++ b/dns/bind/src/opnsense/mvc/app/views/OPNsense/Bind/general.volt @@ -0,0 +1,125 @@ +{# + +OPNsense® is Copyright © 2014 – 2018 by Deciso B.V. +This file is Copyright © 2018 by Michael Muenz +All rights reserved. + +Redistribution and use in source and binary forms, with or without modification, +are permitted provided that the following conditions are met: + +1. Redistributions of source code must retain the above copyright notice, + this list of conditions and the following disclaimer. + +2. Redistributions in binary form must reproduce the above copyright notice, + this list of conditions and the following disclaimer in the documentation + and/or other materials provided with the distribution. + +THIS SOFTWARE IS PROVIDED “AS IS” AND ANY EXPRESS OR IMPLIED WARRANTIES, +INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY +AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE +AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, +OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF +SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS +INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN +CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) +ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE +POSSIBILITY OF SUCH DAMAGE. + +#} + + + + +
+
+
+ {{ partial("layout_partials/base_form",['fields':generalForm,'id':'frm_general_settings'])}} +
+
+ +
+
+
+
+ + + + + + + + + + + + + + + + + + +
{{ lang._('Enabled') }}{{ lang._('Name') }}{{ lang._('Networks') }}{{ lang._('ID') }}{{ lang._('Commands') }}
+ +
+
+
+ +

+
+
+
+ +{{ partial("layout_partials/base_dialog",['fields':formDialogEditBindACL,'id':'dialogEditBindACL','label':lang._('Edit ACL')])}} + + diff --git a/dns/bind/src/opnsense/scripts/OPNsense/Bind/setup.sh b/dns/bind/src/opnsense/scripts/OPNsense/Bind/setup.sh new file mode 100644 index 000000000..d5076a841 --- /dev/null +++ b/dns/bind/src/opnsense/scripts/OPNsense/Bind/setup.sh @@ -0,0 +1,13 @@ +#!/bin/sh + +mkdir -p /var/run/named +chown -R bind:bind /var/run/named +chmod 755 /var/run/named + +mkdir -p /var/dump +chown -R bind:bind /var/dump +chmod 755 /var/dump + +mkdir -p /var/stats +chown -R bind:bind /var/stats +chmod 755 /var/stats \ No newline at end of file diff --git a/dns/bind/src/opnsense/service/conf/actions.d/actions_bind.conf b/dns/bind/src/opnsense/service/conf/actions.d/actions_bind.conf new file mode 100644 index 000000000..09902392f --- /dev/null +++ b/dns/bind/src/opnsense/service/conf/actions.d/actions_bind.conf @@ -0,0 +1,23 @@ +[start] +command:/usr/local/opnsense/scripts/OPNsense/Bind/setup.sh;/usr/local/etc/rc.d/named start +parameters: +type:script +message:starting BIND + +[stop] +command:/usr/local/etc/rc.d/named stop +parameters: +type:script +message:stopping BIND + +[restart] +command:/usr/local/opnsense/scripts/OPNsense/Bind/setup.sh;/usr/local/etc/rc.d/named restart +parameters: +type:script +message:restarting BIND + +[status] +command:/usr/local/etc/rc.d/named status;exit 0 +parameters: +type:script_output +message:request BIND status diff --git a/dns/bind/src/opnsense/service/templates/OPNsense/Bind/+TARGETS b/dns/bind/src/opnsense/service/templates/OPNsense/Bind/+TARGETS new file mode 100644 index 000000000..2bc9df277 --- /dev/null +++ b/dns/bind/src/opnsense/service/templates/OPNsense/Bind/+TARGETS @@ -0,0 +1,2 @@ +named:/etc/rc.conf.d/named +named.conf:/usr/local/etc/namedb/named.conf diff --git a/dns/bind/src/opnsense/service/templates/OPNsense/Bind/named b/dns/bind/src/opnsense/service/templates/OPNsense/Bind/named new file mode 100644 index 000000000..6f4d6766e --- /dev/null +++ b/dns/bind/src/opnsense/service/templates/OPNsense/Bind/named @@ -0,0 +1,6 @@ +{% if helpers.exists('OPNsense.bind.general.enabled') and OPNsense.bind.general.enabled == '1' %} +named_var_script="/usr/local/opnsense/scripts/OPNsense/Bind/setup.sh" +named_enable="YES" +{% else %} +named_enable="NO" +{% endif %} diff --git a/dns/bind/src/opnsense/service/templates/OPNsense/Bind/named.conf b/dns/bind/src/opnsense/service/templates/OPNsense/Bind/named.conf new file mode 100644 index 000000000..2cbf0ae69 --- /dev/null +++ b/dns/bind/src/opnsense/service/templates/OPNsense/Bind/named.conf @@ -0,0 +1,38 @@ +{% if helpers.exists('OPNsense.bind.general.enabled') and OPNsense.bind.general.enabled == '1' %} + +options { + + directory "/usr/local/etc/namedb/working"; + pid-file "/var/run/named/pid"; + dump-file "/var/dump/named_dump.db"; + statistics-file "/var/stats/named.stats"; + +{% if helpers.exists('OPNsense.bind.general.listenv4') and OPNsense.bind.general.listenv4 != '' %} + listen-on { {{ OPNsense.bind.general.listenv4.replace(',', '; ') }}; }; +{% endif %} +{% if helpers.exists('OPNsense.bind.general.listenv6') and OPNsense.bind.general.listenv6 != '' %} + listen-on-v6 { {{ OPNsense.bind.general.listenv6.replace(',', '; ') }}; }; +{% endif %} + +/* + forwarders { + 127.0.0.1; + }; +*/ + +}; + +// If the 'forwarders' clause is not empty the default is to 'forward first' +// which will fall back to sending a query from your local server if the name +// servers in 'forwarders' do not have the answer. Alternatively you can +// force your name server to never initiate queries of its own by enabling the +// following line: +// forward only; + +zone "." { type hint; file "/usr/local/etc/namedb/named.root"; }; + +zone "localhost" { type master; file "/usr/local/etc/namedb/master/localhost-forward.db"; }; +zone "127.in-addr.arpa" { type master; file "/usr/local/etc/namedb/master/localhost-reverse.db"; }; +zone "0.ip6.arpa" { type master; file "/usr/local/etc/namedb/master/localhost-reverse.db"; }; + +{% endif %}