Commit Graph
130 Commits
Author SHA1 Message Date
Franco Fichtner 5418f68038 dns/bind: style sweep 2024-01-10 16:24:21 +01:00
cfac344e4a dns/bind: check&preview primary zone, log to syslog with desired severity (#3708)
* dns/bind: check&preview primary zone, log to syslog with desired severity

and make grids responsive also

* ver bump

and remove foreign part from template

* Update dns/bind/src/etc/inc/plugins.inc.d/bind.inc

* Update dns/bind/src/opnsense/mvc/app/models/OPNsense/Bind/General.xml

* cleanup

-prettify js, actions naming, phalcon post payload handling.
-Error message if Check&Preview button clicked for disabled Zone
-dont show Copy button if not supported

---------

Co-authored-by: Franco Fichtner <franco@lastsummer.de>
2024-01-09 17:33:44 +01:00
kulikov-aandGitHub 1cd458e891 template fix (#3704)
fix template error if there is no 'records' in config at all
2023-12-15 15:09:23 +01:00
doktornotorandGitHub 8e57555345 [os-bind] #3650 - break-dnssec toggle needed for Enable filter-aaaa on IPv4/IPv6 clients (#3651)
If DNSSEC validation is disabled, filter-aaaa-on-v4 or filter-aaaa-on-v6 is set to break-dnssec
instead of yes, then AAAA records will be omitted even if they are signed.

See https://github.com/opnsense/plugins/issues/3650
2023-11-06 09:21:58 +01:00
Franco Fichtner fea4f7eb18 dns/bind: safeguard this as well 2023-08-02 08:42:31 +02:00
Simon FischerandGitHub 8de007770c dns/bind: add DNAME support (#3509) 2023-07-25 11:04:55 +02:00
Franco Fichtner 8f8b2f63db dns/bind: sidestep mismatch of value/label read
This was how it was done before primary/secondary change and
it shouldn't break anything.
2023-05-08 15:16:22 +02:00
Franco Fichtner 055e303393 dns/bind: small typo 2023-05-08 11:51:06 +02:00
Franco Fichtner afec26dc6b dns/bind: prevent port overlap
Although it's possible to use e.g. port 53 with selective listening
addresses its use is highly discouraged and leads to setup woes when
the user is not well-versed in these matters.  So we lock the port
in case another service is using it and if something needs to overlap
port forward rule use is highly encouraged to make that more clear.
2023-05-08 09:22:22 +02:00
Franco Fichtner 51d6c762f5 dns/bind: correct use of "any" address, small tweaks; closes #3417 2023-05-08 09:09:53 +02:00
Patrick M. HausenandFranco Fichtner 7f9f089017 dns/bind: fix bug in ACL processing for allow-query section 2023-04-20 15:29:28 +02:00
Franco Fichtner 456620efbe dns/bind: same same but bind 2023-04-08 18:36:46 +02:00
Franco Fichtner 695f43aa99 dns: rename 'ports' to 'dns_ports' for clarity 2023-03-29 09:10:50 +02:00
Franco Fichtner a69fa0d77d dns/bind: refine previous
It was decided we only want the 'ports' trick for DNS so make
sure the prerequistes for it match the reality of the setup.
This was we can also extend the validation of the DNS port like
we are going to do for Unbound to ensure a functional DNS setup
when multiple DNS servers are being used on the same box.
2023-03-29 08:53:52 +02:00
Franco Fichtner 0d44da2dec dns/bind: if we have $verbose we might as well use it 2023-03-24 15:06:34 +01:00
Franco Fichtner 96129ccaab dns/bind: add glue to operate as standalone DNS for core 2023-03-24 14:59:38 +01:00
Franco Fichtner 7205ea0094 dns/bind: why is switching lib dirs a good idea?
PR: https://forum.opnsense.org/index.php?topic=32092.0
2023-01-26 20:09:33 +01:00
Robbert RijkseandGitHub 7b2119578f move RNDC key to general page (#3258) 2023-01-11 14:34:21 +01:00
Robbert RijkseandGitHub 97e46ed32c dns/bind: allow multiple acls (#3257) 2023-01-11 13:35:30 +01:00
Franco Fichtner b67a1d49bf dns/bind: more style updates 2023-01-11 10:07:27 +01:00
Franco Fichtner 0b5c9a98ef dns/bind: style sweep 2023-01-11 09:56:56 +01:00
Robbert RijkseandGitHub 18a4256267 dns/bind: move to primary/secondary (#3234) 2023-01-11 09:52:32 +01:00
Robbert RijkseandGitHub 3c74322935 dns/bind: add PR record type (#3256) 2023-01-11 09:47:26 +01:00
Robbert RijkseandGitHub 23aae2f87e dns/bind: ensure the ACL names are unique (#3254) 2023-01-10 14:43:26 +01:00
Franco Fichtner 5f0a181e52 dns/bind: actually save and validate the key
It would probably be better to move it to general/advanced.
The restart is an issue but a help text would suffice.
2023-01-10 10:53:30 +01:00