pfSense

/* $Id$ */

/*

	Copyright (C) 2003-2004 Bob Zoller <bob@kludgebox.com> and Manuel Kasper <mk@neon1.net>.

	Copyright (C) 2013-2015 Electric Sheep Fencing, LP

	All rights reserved.

	Redistribution and use in source and binary forms, with or without

	1. Redistributions of source code must retain the above copyright notice,

	2. Redistributions in binary form must reproduce the above copyright

	THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,

/*

	pfSense_MODULE: dnsforwarder

*/

##|+PRIV

require("guiconfig.inc");

require_once("functions.inc");

require_once("system.inc");

$pconfig['enable'] = isset($config['dnsmasq']['enable']);

$pconfig['regdhcp'] = isset($config['dnsmasq']['regdhcp']);

$pconfig['regdhcpstatic'] = isset($config['dnsmasq']['regdhcpstatic']);

$pconfig['dhcpfirst'] = isset($config['dnsmasq']['dhcpfirst']);

$pconfig['strict_order'] = isset($config['dnsmasq']['strict_order']);

$pconfig['no_private_reverse'] = isset($config['dnsmasq']['no_private_reverse']);

$pconfig['port'] = $config['dnsmasq']['port'];

$pconfig['custom_options'] = $config['dnsmasq']['custom_options'];

$pconfig['strictbind'] = isset($config['dnsmasq']['strictbind']);

if (!empty($config['dnsmasq']['interface'])) {

	$pconfig['interface'] = explode(",", $config['dnsmasq']['interface']);

} else {

	$pconfig['interface'] = array();

}

if (!is_array($config['dnsmasq']['hosts'])) {

	$config['dnsmasq']['hosts'] = array();

}

if (!is_array($config['dnsmasq']['domainoverrides'])) {

	$config['dnsmasq']['domainoverrides'] = array();

}

$a_hosts = &$config['dnsmasq']['hosts'];

$a_domainOverrides = &$config['dnsmasq']['domainoverrides'];

	unset($input_errors);

	$config['dnsmasq']['regdhcpstatic'] = ($_POST['regdhcpstatic']) ? true : false;

	$config['dnsmasq']['dhcpfirst'] = ($_POST['dhcpfirst']) ? true : false;

	$config['dnsmasq']['strict_order'] = ($_POST['strict_order']) ? true : false;

	$config['dnsmasq']['no_private_reverse'] = ($_POST['no_private_reverse']) ? true : false;

	$config['dnsmasq']['custom_options'] = str_replace("\r\n", "\n", $_POST['custom_options']);

	$config['dnsmasq']['strictbind'] = ($_POST['strictbind']) ? true : false;

	if (isset($_POST['enable']) && isset($config['unbound']['enable'])) {

		if ($_POST['port'] == $config['unbound']['port']) {

			$input_errors[] = "The DNS Resolver is enabled using this port. Choose a non-conflicting port, or disable DNS Resolver.";

		}

	}

		if (is_port($_POST['port'])) {

			$config['dnsmasq']['port'] = $_POST['port'];

		} else {

			$input_errors[] = gettext("You must specify a valid port number");

		}

		unset($config['dnsmasq']['port']);

	}

	if (is_array($_POST['interface'])) {

		$config['dnsmasq']['interface'] = implode(",", $_POST['interface']);

	} elseif (isset($config['dnsmasq']['interface'])) {

		unset($config['dnsmasq']['interface']);

	}

	if ($config['dnsmasq']['custom_options']) {

		foreach (preg_split('/\s+/', $config['dnsmasq']['custom_options']) as $c) {

			$args .= escapeshellarg("--{$c}") . " ";

		}

		exec("/usr/local/sbin/dnsmasq --test $args", $output, $rc);

		if ($rc != 0) {

			$input_errors[] = gettext("Invalid custom options");

		}

	}

	if (!$input_errors) {

		$retval = 0;

		// Reload filter (we might need to sync to CARP hosts)

		filter_configure();

		/* Update resolv.conf in case the interface bindings exclude localhost. */

		/* Start or restart dhcpleases when it's necessary */

		if ($retval == 0) {

			clear_subsystem_dirty('hosts');

		}

	}

}

	if ($_GET['type'] == 'host') {

			mark_subsystem_dirty('hosts');

			header("Location: services_dnsmasq.php");

			mark_subsystem_dirty('hosts');

			header("Location: services_dnsmasq.php");

}

function build_if_list() {

$closehead = false;

$pgtitle = array(gettext("Services"), gettext("DNS forwarder"));

$shortcut_section = "forwarder";

include("head.inc");

if ($input_errors)

if ($savemsg)

require_once('classes/Form.class.php');

$form = new Form();

))->toggles('.toggle-dhcp', 'disable');

))->setHelp(sprintf("If this option is set, then machines that specify".

			" their hostname when requesting a DHCP lease will be registered".

			" General setup%s to the proper value.",'<a href="system.php">','</a>'))

))->setHelp(sprintf("If this option is set, then DHCP static mappings will ".

					"be registered in the DNS forwarder, so that their name can be ".

					"System: General setup%s to the proper value.",'<a href="system.php">','</a>'))

))->setHelp(sprintf("If this option is set, then DHCP mappings will ".

					"be resolved before the manual list of names below. This only ".

					"affects the name given for a reverse lookup (PTR)."))

$group = new Form_Group('DNS Query Forwarding');

	'strict_order',

))->setHelp(sprintf("If this option is set, %s DNS Forwarder (dnsmasq) will ".

					"query the DNS servers sequentially in the order specified (<i>System - General Setup - DNS Servers</i>), ".

					"rather than all at once in parallel. ", $g['product_name']));

$group->add(new Form_Checkbox(

	'domain_needed',

))->setHelp(sprintf("If this option is set, %s DNS Forwarder (dnsmasq) will ".

					"not forward A or AAAA queries for plain names, without dots or domain parts, to upstream name servers.	 ".

					"If the name is not known from /etc/hosts or DHCP then a \"not found\" answer is returned. ", $g['product_name']));

$group->add(new Form_Checkbox(

	'no_private_reverse',

))->setHelp(sprintf("If this option is set, %s DNS Forwarder (dnsmasq) will ".

					"not forward reverse DNS lookups (PTR) for private addresses (RFC 1918) to upstream name servers.  ".

					"If the IP to name is not known from /etc/hosts, DHCP or a specific domain override then a \"not found\" answer is immediately returned. ", $g['product_name']));

$section->add($group);

$section->addInput(new Form_Input(

	'number',

))->setHelp('The port used for responding to DNS queries. It should normally be left blank unless another service needs to bind to TCP/UDP port 53.');

	'Strict binding',

	'Strict interface binding',

))->setHelp('If this option is set, the DNS forwarder will only bind to the interfaces containing the IP addresses selected above, ' .

					'rather than binding to all interfaces and discarding queries to other addresses.' . '<br /><br />' .

					'This option does NOT work with IPv6. If set, dnsmasq will not bind to IPv6 addresses.');

$section->addInput(new Form_TextArea(

	'custom_options',

))->setHelp('Enter any additional options you would like to add to the dnsmasq configuration here, separated by a space or newline')

print_info_box(sprintf("If the DNS forwarder is enabled, the DHCP".

	" service (if enabled) will automatically serve the LAN IP".

	"General setup%s page.",'<a href="system.php">','</a>','<a href="system.php">','</a>'));

?>

	<div class="panel-heading"><h2><?=gettext("Host Overrides")?></h2></div>

	<div class="panel-body table-responsive">

				<tr>

					<th><?=gettext("Host")?></th>

				</tr>

			</thead>

foreach ($a_hosts as $i => $hostent):

?>

						<?=$hostent['ip']?>

					</td>

		foreach ($hostent['aliases']['item'] as $i => $alias):

?>

				<tr>

					<td>

				</tr>

<?php

print_info_box(gettext("Entries in this section override individual results from the forwarders.") .

?>

	<div class="panel-heading"><h2><?=gettext("Domain Overrides")?></h2></div>

	<div class="panel-body table-responsive">

				<tr>

					<th><?=gettext("Domain")?></th>

				</tr>

			</thead>

foreach ($a_domainOverrides as $i => $doment):

?>

				<tr>

					<td>

						<?=strtolower($doment['domain'])?>

					</td>

						<?=$doment['ip']?>

					</td>

						<?=htmlspecialchars($doment['descr'])?>

					</td>

				</tr>

<?php

		</table>

	</div>

						" authoritative DNS server to be queried for that domain."));