Bug #4258: DNS Resolver - auto-added access controls missing IPv6 subnets where "all" interfaces selected - pfSense - pfSense bugtracker

Custom queries

2.8.1 - Resolved/Closed
2.9.0 - Resolved/Closed
26.03 Plus - All Closed Issues
26.03 Target - All Closed Issues
26.03.1 Plus - All Closed Issues
26.03.1 Target - All Closed Issues
26.07 Plus - All Closed Issues
26.07 Target - All Closed Issues
26.10 Plus - All Closed Issues
26.10 Plus - All Open Issues
26.10 Plus - Feedback Issues
26.10 Plus - Needs Attention/Work
26.10 Plus - New/Confirmed/In Progress Issues
26.10 Plus - Pull Request Review
26.10 Plus - Waiting on Merge
26.10 Target - All Closed Issues
26.10 Target - All Open Issues
All Open Issues assigned to Me
All Open Pull Requests
Any Target - All Open Regressions
Any Target - Feedback Issues
CE-Next - All Closed Issues (Move to specific target)
CE-Next - All Open Issues
CE-Next - Feedback (Likely needs target changed)
New Issues by Category - Future Target
New Issues by Category - No Target
New Issues by Category - No Target+Future
No Target - All Open Issues (Base Only)
No Target - New Issues (Base Only)
No Target - New Issues (Base and Packages)
Plus-next Feedback/Closed (likely needs target changed)
Release Notes - CE Target Version (DO NOT EDIT)
Release Notes - Plus Target Version (DO NOT EDIT)
Release Notes - Target Version (DO NOT EDIT)

Actions

Copy link

Bug #4258

closed

DNS Resolver - auto-added access controls missing IPv6 subnets where "all" interfaces selected

Bug #4258: DNS Resolver - auto-added access controls missing IPv6 subnets where "all" interfaces selected

Added by Kill Bill over 11 years ago. Updated over 11 years ago.

Status:

Resolved

Priority:

Normal

Assignee:

Category:

DNS Resolver

Target version:

2.2

Start date:

01/21/2015

Due date:

% Done:

Estimated time:

Plus Target Version:

Release Notes:

Affected Version:

2.2

Affected Architecture:

All

Description

IPv4 subnets are automagically added to /var/unbound/access_lists.conf; however this is not done with any of the IPv6 subnets defined for internal interfaces.

History
Notes
Property changes

CB Updated by Chris Buechler over 11 years ago Actions
Copy link
#1

Status changed from New to Feedback
% Done changed from 0 to 100

Applied in changeset commit:7684d66fad740820ca1c945a5b67a6f813306235.

CB Updated by Chris Buechler over 11 years ago Actions
Copy link
#2

Applied in changeset commit:7fd2a0e3a9163d8cc3f578f4bd105ed0c982737f.

CB Updated by Chris Buechler over 11 years ago Actions
Copy link
#3

Subject changed from DNS Resolver - auto-added access controls missing IPv6 subnets to DNS Resolver - auto-added access controls missing IPv6 subnets where "all" interfaces selected
Status changed from Feedback to Resolved
Target version set to 2.2
% Done changed from 100 to 0

updated subject to specific issue. Fixed

KB Updated by Kill Bill over 11 years ago Actions
Copy link
#4

Ok, this works mostly fine, except that it misses OpenVPN's IPv6 (and probably IPsec as well, don't have IPv6 IPsec tunnel configured though.)

CB Updated by Chris Buechler over 11 years ago Actions
Copy link
#5

It only covers interfaces that are assigned and enabled plus static routes for IPv6. Manual entries will be required for other circumstances.

KB Updated by Kill Bill over 11 years ago Actions
Copy link
#6

Kinda confused really what it covers now. It certainly is adding OpenVPN and IPSec IPv4 subnets to the ACL.

CB Updated by Chris Buechler over 11 years ago Actions
Copy link
#7

for v4, it uses the same source networks as it uses for outbound NAT auto rule generation, which is a diff process.

KB Updated by Kill Bill over 11 years ago Actions
Copy link
#8

OK, lets call this fixed then. Thanks. :)

(Kinda inconsistent results, perhaps the VPN stuff would be worth a separate checkbox instead, but it certainly is not good time for similar nontrivial changes now.)

Actions

Copy link

Also available in: Atom

Project

General

Profile

pfSense

Custom queries

Bug #4258

DNS Resolver - auto-added access controls missing IPv6 subnets where "all" interfaces selected

CB Updated by Chris Buechler over 11 years ago Actions
Copy link
#1

CB Updated by Chris Buechler over 11 years ago Actions
Copy link
#2

CB Updated by Chris Buechler over 11 years ago Actions
Copy link
#3

KB Updated by Kill Bill over 11 years ago Actions
Copy link
#4

CB Updated by Chris Buechler over 11 years ago Actions
Copy link
#5

KB Updated by Kill Bill over 11 years ago Actions
Copy link
#6

CB Updated by Chris Buechler over 11 years ago Actions
Copy link
#7

KB Updated by Kill Bill over 11 years ago Actions
Copy link
#8

Project

General

Profile

pfSense

Custom queries

Bug #4258

DNS Resolver - auto-added access controls missing IPv6 subnets where "all" interfaces selected

CB Updated by Chris Buechler over 11 years ago ActionsCopy link #1

CB Updated by Chris Buechler over 11 years ago ActionsCopy link #2

CB Updated by Chris Buechler over 11 years ago ActionsCopy link #3

KB Updated by Kill Bill over 11 years ago ActionsCopy link #4

CB Updated by Chris Buechler over 11 years ago ActionsCopy link #5

KB Updated by Kill Bill over 11 years ago ActionsCopy link #6

CB Updated by Chris Buechler over 11 years ago ActionsCopy link #7

KB Updated by Kill Bill over 11 years ago ActionsCopy link #8

CB Updated by Chris Buechler over 11 years ago Actions
Copy link
#1

CB Updated by Chris Buechler over 11 years ago Actions
Copy link
#2

CB Updated by Chris Buechler over 11 years ago Actions
Copy link
#3

KB Updated by Kill Bill over 11 years ago Actions
Copy link
#4

CB Updated by Chris Buechler over 11 years ago Actions
Copy link
#5

KB Updated by Kill Bill over 11 years ago Actions
Copy link
#6

CB Updated by Chris Buechler over 11 years ago Actions
Copy link
#7

KB Updated by Kill Bill over 11 years ago Actions
Copy link
#8