Project

General

Profile

Actions

Regression #11938

closed

DNS Resolver does not add PTR record for OpenVPN clients

Added by Viktor Gurov almost 3 years ago. Updated over 2 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Viktor Gurov
Category:
OpenVPN
Target version:
Start date:
05/20/2021
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
22.01
Release Notes:
Default
Affected Version:
Affected Architecture:

Description

After changes in #11129 openvpn.learn-address.sh uses the 'unbound-control local_data' command to add client A/AAAA DNS records,
but it doesn't add PTR and "A/AAAA without domain part" records:

# do not restart unbound on connect, see https://redmine.pfsense.org/issues/11129
/usr/bin/su -m unbound -c "unbound-control -c /var/unbound/unbound.conf local_data ${CN}.${DOMAIN} ${ARECORD} ${IP}" 

it creates the correct 'openvpn.client.${IP}.conf' file:

# Add new local-data entry.
(
    echo "local-data-ptr: \"${IP} ${CN}.${DOMAIN}\"" &&
    echo "local-data: \"${CN}.${DOMAIN} ${ARECORD} ${IP}\"" &&
    echo "local-data: \"${CN} ${ARECORD} ${IP}\"" 
) > "${TMPCONF}" 

Actions #2

Updated by Jim Pingle almost 3 years ago

  • Status changed from New to Pull Request Review
  • Target version set to 2.6.0
  • Plus Target Version set to 21.09
Actions #3

Updated by Renato Botelho almost 3 years ago

  • Status changed from Pull Request Review to Feedback
  • Assignee set to Viktor Gurov

PR has been merged. Thanks!

Actions #4

Updated by Viktor Gurov almost 3 years ago

  • % Done changed from 0 to 100
Actions #5

Updated by Jim Pingle over 2 years ago

  • Subject changed from Unbound does not add PTR record when connecting openvpn client to DNS Resolver does not add PTR record for OpenVPN clients

Updating subject for release notes.

Actions #6

Updated by Danilo Zrenjanin over 2 years ago

  • Status changed from Feedback to Resolved

Tested on the:

2.6.0-DEVELOPMENT (amd64)
built on Fri Oct 08 05:20:25 UTC 2021
FreeBSD 12.2-STABLE

It adds "A/AAAA DNS", PTR, and "A/AAAA without domain part" entries. Ticket resolved.

Actions #7

Updated by Jim Pingle over 2 years ago

  • Plus Target Version changed from 21.09 to 22.01
Actions

Also available in: Atom PDF