Project

General

Profile

Actions
Copy link

Regression #11938

closed

DNS Resolver does not add PTR record for OpenVPN clients

Added by Viktor Gurov over 3 years ago. Updated about 3 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Viktor Gurov
Category:
OpenVPN
Target version:
2.6.0
Start date:
05/20/2021
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
22.01
Release Notes:
Default
Affected Version:
Affected Architecture:

Description

After changes in #11129 openvpn.learn-address.sh uses the 'unbound-control local_data' command to add client A/AAAA DNS records,
but it doesn't add PTR and "A/AAAA without domain part" records:

# do not restart unbound on connect, see https://redmine.pfsense.org/issues/11129
/usr/bin/su -m unbound -c "unbound-control -c /var/unbound/unbound.conf local_data ${CN}.${DOMAIN} ${ARECORD} ${IP}"

it creates the correct 'openvpn.client.${IP}.conf' file:

# Add new local-data entry.
(
    echo "local-data-ptr: \"${IP} ${CN}.${DOMAIN}\"" &&
    echo "local-data: \"${CN}.${DOMAIN} ${ARECORD} ${IP}\"" &&
    echo "local-data: \"${CN} ${ARECORD} ${IP}\"" 
) > "${TMPCONF}"

Actions
Copy link
 #2

Updated by Jim Pingle over 3 years ago

  • Status changed from New to Pull Request Review
  • Target version set to 2.6.0
  • Plus Target Version set to 21.09
Actions
Copy link
 #3

Updated by Renato Botelho over 3 years ago

  • Status changed from Pull Request Review to Feedback
  • Assignee set to Viktor Gurov

PR has been merged. Thanks!

Actions
Copy link
 #4

Updated by Viktor Gurov over 3 years ago

  • % Done changed from 0 to 100
Actions
Copy link
 #5

Updated by Jim Pingle about 3 years ago

  • Subject changed from Unbound does not add PTR record when connecting openvpn client to DNS Resolver does not add PTR record for OpenVPN clients

Updating subject for release notes.

Actions
Copy link
 #6

Updated by Danilo Zrenjanin about 3 years ago

  • Status changed from Feedback to Resolved

Tested on the:

2.6.0-DEVELOPMENT (amd64)
built on Fri Oct 08 05:20:25 UTC 2021
FreeBSD 12.2-STABLE

It adds "A/AAAA DNS", PTR, and "A/AAAA without domain part" entries. Ticket resolved.

Actions
Copy link
 #7

Updated by Jim Pingle about 3 years ago

  • Plus Target Version changed from 21.09 to 22.01
Actions
Copy link

Also available in: Atom PDF