Project

General

Profile

Download (15.5 KB) Statistics
| Branch: | Tag: | Revision:
1
<?php
2
/*
3
 * services_dnsmasq.php
4
 *
5
 * part of pfSense (https://www.pfsense.org)
6
 * Copyright (c) 2004-2016 Rubicon Communications, LLC (Netgate)
7
 * Copyright (c) 2003-2004 Bob Zoller <bob@kludgebox.com>
8
 * All rights reserved.
9
 *
10
 * originally based on m0n0wall (http://m0n0.ch/wall)
11
 * Copyright (c) 2003-2004 Manuel Kasper <mk@neon1.net>.
12
 * All rights reserved.
13
 *
14
 * Licensed under the Apache License, Version 2.0 (the "License");
15
 * you may not use this file except in compliance with the License.
16
 * You may obtain a copy of the License at
17
 *
18
 * http://www.apache.org/licenses/LICENSE-2.0
19
 *
20
 * Unless required by applicable law or agreed to in writing, software
21
 * distributed under the License is distributed on an "AS IS" BASIS,
22
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
23
 * See the License for the specific language governing permissions and
24
 * limitations under the License.
25
 */
26

    
27
##|+PRIV
28
##|*IDENT=page-services-dnsforwarder
29
##|*NAME=Services: DNS Forwarder
30
##|*DESCR=Allow access to the 'Services: DNS Forwarder' page.
31
##|*MATCH=services_dnsmasq.php*
32
##|-PRIV
33

    
34
require_once("guiconfig.inc");
35
require_once("functions.inc");
36
require_once("filter.inc");
37
require_once("shaper.inc");
38
require_once("system.inc");
39

    
40
// Sort host entries for display in alphabetical order
41
function hostcmp($a, $b) {
42
	return strcasecmp($a['host'], $b['host']);
43
}
44

    
45
function hosts_sort() {
46
	global $a_hosts;
47

    
48
	if (!is_array($a_hosts)) {
49
		return;
50
	}
51

    
52
	usort($a_hosts, "hostcmp");
53
}
54

    
55
// Sort domain entries for display in alphabetical order
56
function domaincmp($a, $b) {
57
	return strcasecmp($a['domain'], $b['domain']);
58
}
59

    
60
function domains_sort() {
61
	global $a_domainOverrides;
62

    
63
	if (!is_array($a_domainOverrides)) {
64
		return;
65
	}
66

    
67
	usort($a_domainOverrides, "domaincmp");
68
}
69

    
70
$pconfig['enable'] = isset($config['dnsmasq']['enable']);
71
$pconfig['regdhcp'] = isset($config['dnsmasq']['regdhcp']);
72
$pconfig['regdhcpstatic'] = isset($config['dnsmasq']['regdhcpstatic']);
73
$pconfig['dhcpfirst'] = isset($config['dnsmasq']['dhcpfirst']);
74
$pconfig['strict_order'] = isset($config['dnsmasq']['strict_order']);
75
$pconfig['domain_needed'] = isset($config['dnsmasq']['domain_needed']);
76
$pconfig['no_private_reverse'] = isset($config['dnsmasq']['no_private_reverse']);
77
$pconfig['port'] = $config['dnsmasq']['port'];
78
$pconfig['custom_options'] = $config['dnsmasq']['custom_options'];
79
$pconfig['strictbind'] = isset($config['dnsmasq']['strictbind']);
80

    
81
if (!empty($config['dnsmasq']['interface'])) {
82
	$pconfig['interface'] = explode(",", $config['dnsmasq']['interface']);
83
} else {
84
	$pconfig['interface'] = array();
85
}
86

    
87
if (!is_array($config['dnsmasq']['hosts'])) {
88
	$config['dnsmasq']['hosts'] = array();
89
}
90

    
91
if (!is_array($config['dnsmasq']['domainoverrides'])) {
92
	$config['dnsmasq']['domainoverrides'] = array();
93
}
94

    
95
$a_hosts = &$config['dnsmasq']['hosts'];
96

    
97
// Add a temporary index so we don't lose the order after sorting
98
for ($idx=0; $idx<count($a_hosts); $idx++) {
99
	$a_hosts[$idx]['idx'] = $idx;
100
}
101

    
102
hosts_sort();
103

    
104
$a_domainOverrides = &$config['dnsmasq']['domainoverrides'];
105

    
106
// Add a temporary index so we don't lose the order after sorting
107
for ($idx=0; $idx<count($a_domainOverrides); $idx++) {
108
	$a_domainOverrides[$idx]['idx'] = $idx;
109
}
110

    
111
domains_sort();
112

    
113
if ($_POST) {
114
	if ($_POST['apply']) {
115
		$retval = 0;
116
		$retval |= services_dnsmasq_configure();
117

    
118
		// Reload filter (we might need to sync to CARP hosts)
119
		filter_configure();
120
		/* Update resolv.conf in case the interface bindings exclude localhost. */
121
		system_resolvconf_generate();
122
		/* Start or restart dhcpleases when it's necessary */
123
		system_dhcpleases_configure();
124

    
125
		if ($retval == 0) {
126
			clear_subsystem_dirty('hosts');
127
		}
128
	} else {
129
		$pconfig = $_POST;
130
		unset($input_errors);
131

    
132
		$config['dnsmasq']['enable'] = ($_POST['enable']) ? true : false;
133
		$config['dnsmasq']['regdhcp'] = ($_POST['regdhcp']) ? true : false;
134
		$config['dnsmasq']['regdhcpstatic'] = ($_POST['regdhcpstatic']) ? true : false;
135
		$config['dnsmasq']['dhcpfirst'] = ($_POST['dhcpfirst']) ? true : false;
136
		$config['dnsmasq']['strict_order'] = ($_POST['strict_order']) ? true : false;
137
		$config['dnsmasq']['domain_needed'] = ($_POST['domain_needed']) ? true : false;
138
		$config['dnsmasq']['no_private_reverse'] = ($_POST['no_private_reverse']) ? true : false;
139
		$config['dnsmasq']['custom_options'] = str_replace("\r\n", "\n", $_POST['custom_options']);
140
		$config['dnsmasq']['strictbind'] = ($_POST['strictbind']) ? true : false;
141

    
142
		if (isset($_POST['enable']) && isset($config['unbound']['enable'])) {
143
			if ($_POST['port'] == $config['unbound']['port']) {
144
				$input_errors[] = gettext("The DNS Resolver is enabled using this port. Choose a non-conflicting port, or disable DNS Resolver.");
145
			}
146
		}
147

    
148
		if ($_POST['port']) {
149
			if (is_port($_POST['port'])) {
150
				$config['dnsmasq']['port'] = $_POST['port'];
151
			} else {
152
				$input_errors[] = gettext("A valid port number must be specified.");
153
			}
154
		} else if (isset($config['dnsmasq']['port'])) {
155
			unset($config['dnsmasq']['port']);
156
		}
157

    
158
		if (is_array($_POST['interface'])) {
159
			$config['dnsmasq']['interface'] = implode(",", $_POST['interface']);
160
		} elseif (isset($config['dnsmasq']['interface'])) {
161
			unset($config['dnsmasq']['interface']);
162
		}
163

    
164
		if ($config['dnsmasq']['custom_options']) {
165
			$args = '';
166
			foreach (preg_split('/\s+/', $config['dnsmasq']['custom_options']) as $c) {
167
				$args .= escapeshellarg("--{$c}") . " ";
168
			}
169
			exec("/usr/local/sbin/dnsmasq --test $args", $output, $rc);
170
			if ($rc != 0) {
171
				$input_errors[] = gettext("Invalid custom options");
172
			}
173
		}
174

    
175
		if (!$input_errors) {
176
			write_config();
177
			mark_subsystem_dirty('hosts');
178
		}
179
	}
180
}
181

    
182
if ($_GET['act'] == "del") {
183
	if ($_GET['type'] == 'host') {
184
		if ($a_hosts[$_GET['id']]) {
185
			unset($a_hosts[$_GET['id']]);
186
			write_config();
187
			mark_subsystem_dirty('hosts');
188
			header("Location: services_dnsmasq.php");
189
			exit;
190
		}
191
	} elseif ($_GET['type'] == 'doverride') {
192
		if ($a_domainOverrides[$_GET['id']]) {
193
			unset($a_domainOverrides[$_GET['id']]);
194
			write_config();
195
			mark_subsystem_dirty('hosts');
196
			header("Location: services_dnsmasq.php");
197
			exit;
198
		}
199
	}
200
}
201

    
202
function build_if_list() {
203
	global $pconfig;
204

    
205
	$interface_addresses = get_possible_listen_ips(true);
206
	$iflist = array('options' => array(), 'selected' => array());
207

    
208
	$iflist['options'][""]	= "All";
209
	if (empty($pconfig['interface']) || empty($pconfig['interface'][0])) {
210
		array_push($iflist['selected'], "");
211
	}
212

    
213
	foreach ($interface_addresses as $laddr => $ldescr) {
214
		$iflist['options'][$laddr] = htmlspecialchars($ldescr);
215

    
216
		if ($pconfig['interface'] && in_array($laddr, $pconfig['interface'])) {
217
			array_push($iflist['selected'], $laddr);
218
		}
219
	}
220

    
221
	unset($interface_addresses);
222

    
223
	return($iflist);
224
}
225

    
226
$pgtitle = array(gettext("Services"), gettext("DNS Forwarder"));
227
$shortcut_section = "forwarder";
228
include("head.inc");
229

    
230
if ($input_errors) {
231
	print_input_errors($input_errors);
232
}
233

    
234
if ($_POST['apply']) {
235
	print_apply_result_box($retval);
236
}
237

    
238
if (is_subsystem_dirty('hosts')) {
239
	print_apply_box(gettext("The DNS forwarder configuration has been changed.") . "<br />" . gettext("The changes must be applied for them to take effect."));
240
}
241

    
242
$form = new Form();
243

    
244
$section = new Form_Section('General DNS Forwarder Options');
245

    
246
$section->addInput(new Form_Checkbox(
247
	'enable',
248
	'Enable',
249
	'Enable DNS forwarder',
250
	$pconfig['enable']
251
))->toggles('.toggle-dhcp', 'disable');
252

    
253
$section->addInput(new Form_Checkbox(
254
	'regdhcp',
255
	'DHCP Registration',
256
	'Register DHCP leases in DNS forwarder',
257
	$pconfig['regdhcp']
258
))->setHelp('If this option is set machines that specify'.
259
			' their hostname when requesting a DHCP lease will be registered'.
260
			' in the DNS forwarder, so that their name can be resolved.'.
261
			' The domain in %1$sSystem: General Setup%2$s should also'.
262
			' be set to the proper value.','<a href="system.php">','</a>')
263
	->addClass('toggle-dhcp');
264

    
265
$section->addInput(new Form_Checkbox(
266
	'regdhcpstatic',
267
	'Static DHCP',
268
	'Register DHCP static mappings in DNS forwarder',
269
	$pconfig['regdhcpstatic']
270
))->setHelp('If this option is set, DHCP static mappings will '.
271
					'be registered in the DNS forwarder, so that their name can be '.
272
					'resolved. The domain in %1$sSystem: General Setup%2$s should also '.
273
					'be set to the proper value.','<a href="system.php">','</a>')
274
	->addClass('toggle-dhcp');
275

    
276
$section->addInput(new Form_Checkbox(
277
	'dhcpfirst',
278
	'Prefer DHCP',
279
	'Resolve DHCP mappings first',
280
	$pconfig['dhcpfirst']
281
))->setHelp("If this option is set DHCP mappings will ".
282
					"be resolved before the manual list of names below. This only ".
283
					"affects the name given for a reverse lookup (PTR).")
284
	->addClass('toggle-dhcp');
285

    
286
$group = new Form_Group('DNS Query Forwarding');
287

    
288
$group->add(new Form_Checkbox(
289
	'strict_order',
290
	'DNS Query Forwarding',
291
	'Query DNS servers sequentially',
292
	$pconfig['strict_order']
293
))->setHelp("If this option is set %s DNS Forwarder (dnsmasq) will ".
294
					"query the DNS servers sequentially in the order specified (<i>System - General Setup - DNS Servers</i>), ".
295
					"rather than all at once in parallel. ", $g['product_name']);
296

    
297
$group->add(new Form_Checkbox(
298
	'domain_needed',
299
	null,
300
	'Require domain',
301
	$pconfig['domain_needed']
302
))->setHelp("If this option is set %s DNS Forwarder (dnsmasq) will ".
303
					"not forward A or AAAA queries for plain names, without dots or domain parts, to upstream name servers.	 ".
304
					"If the name is not known from /etc/hosts or DHCP then a \"not found\" answer is returned. ", $g['product_name']);
305

    
306
$group->add(new Form_Checkbox(
307
	'no_private_reverse',
308
	null,
309
	'Do not forward private reverse lookups',
310
	$pconfig['no_private_reverse']
311
))->setHelp("If this option is set %s DNS Forwarder (dnsmasq) will ".
312
					"not forward reverse DNS lookups (PTR) for private addresses (RFC 1918) to upstream name servers.  ".
313
					"Any entries in the Domain Overrides section forwarding private \"n.n.n.in-addr.arpa\" names to a specific server are still forwarded. ".
314
					"If the IP to name is not known from /etc/hosts, DHCP or a specific domain override then a \"not found\" answer is immediately returned. ", $g['product_name']);
315

    
316
$section->add($group);
317

    
318
$section->addInput(new Form_Input(
319
	'port',
320
	'Listen Port',
321
	'number',
322
	$pconfig['port'],
323
	['placeholder' => '53']
324
))->setHelp('The port used for responding to DNS queries. It should normally be left blank unless another service needs to bind to TCP/UDP port 53.');
325

    
326
$iflist = build_if_list();
327

    
328
$section->addInput(new Form_Select(
329
	'interface',
330
	'*Interfaces',
331
	$iflist['selected'],
332
	$iflist['options'],
333
	true
334
))->setHelp('Interface IPs used by the DNS Forwarder for responding to queries from clients. If an interface has both IPv4 and IPv6 IPs, both are used. Queries to other interface IPs not selected below are discarded. ' .
335
			'The default behavior is to respond to queries on every available IPv4 and IPv6 address.');
336

    
337
$section->addInput(new Form_Checkbox(
338
	'strictbind',
339
	'Strict binding',
340
	'Strict interface binding',
341
	$pconfig['strictbind']
342
))->setHelp('If this option is set, the DNS forwarder will only bind to the interfaces containing the IP addresses selected above, ' .
343
					'rather than binding to all interfaces and discarding queries to other addresses.' . '<br /><br />' .
344
					'This option does NOT work with IPv6. If set, dnsmasq will not bind to IPv6 addresses.');
345

    
346
$section->addInput(new Form_Textarea(
347
	'custom_options',
348
	'Custom options',
349
	$pconfig['custom_options']
350
))->setHelp('Enter any additional options to add to the dnsmasq configuration here, separated by a space or newline.')
351
  ->addClass('advanced');
352

    
353
$form->add($section);
354
print($form);
355

    
356
?>
357
<div class="panel panel-default">
358
	<div class="panel-heading"><h2 class="panel-title"><?=gettext("Host Overrides")?></h2></div>
359
	<div class="panel-body table-responsive">
360
		<table class="table table-striped table-hover table-condensed sortable-theme-bootstrap table-rowdblclickedit" data-sortable>
361
			<thead>
362
				<tr>
363
					<th><?=gettext("Host")?></th>
364
					<th><?=gettext("Domain")?></th>
365
					<th><?=gettext("IP")?></th>
366
					<th><?=gettext("Description")?></th>
367
					<th><?=gettext("Actions")?></th>
368
				</tr>
369
			</thead>
370
			<tbody>
371
<?php
372
foreach ($a_hosts as $i => $hostent):
373
?>
374
				<tr>
375
					<td>
376
						<?=$hostent['host']?>
377
					</td>
378
					<td>
379
						<?=$hostent['domain']?>
380
					</td>
381
					<td>
382
						<?=$hostent['ip']?>
383
					</td>
384
					<td>
385
						<?=htmlspecialchars($hostent['descr'])?>
386
					</td>
387
					<td>
388
						<a class="fa fa-pencil"	title="<?=gettext('Edit host override')?>" 	href="services_dnsmasq_edit.php?id=<?=$hostent['idx']?>"></a>
389
						<a class="fa fa-trash"	title="<?=gettext('Delete host override')?>"	href="services_dnsmasq.php?type=host&amp;act=del&amp;id=<?=$hostent['idx']?>"></a>
390
					</td>
391
				</tr>
392

    
393
<?php
394
	if ($hostent['aliases']['item'] && is_array($hostent['aliases']['item'])):
395
		foreach ($hostent['aliases']['item'] as $alias):
396
?>
397
				<tr>
398
					<td>
399
						<?=$alias['host']?>
400
					</td>
401
					<td>
402
						<?=$alias['domain']?>
403
					</td>
404
					<td>
405
						<?=gettext("Alias for ");?><?=$hostent['host'] ? $hostent['host'] . '.' . $hostent['domain'] : $hostent['domain']?>
406
					</td>
407
					<td>
408
						<i class="fa fa-angle-double-right text-info"></i>
409
						<?=htmlspecialchars($alias['description'])?>
410
					</td>
411
					<td>
412
						<a class="fa fa-pencil"	title="<?=gettext('Edit host override')?>" 	href="services_dnsmasq_edit.php?id=<?=$i?>"></a>
413
					</td>
414
				</tr>
415
<?php
416
		endforeach;
417
	endif;
418
endforeach;
419
?>
420
			</tbody>
421
		</table>
422
	</div>
423
</div>
424

    
425
<nav class="action-buttons">
426
	<a href="services_dnsmasq_edit.php" class="btn btn-sm btn-success btn-sm">
427
		<i class="fa fa-plus icon-embed-btn"></i>
428
		<?=gettext('Add')?>
429
	</a>
430
</nav>
431

    
432
<div class="panel panel-default">
433
	<div class="panel-heading"><h2 class="panel-title"><?=gettext("Domain Overrides")?></h2></div>
434
	<div class="panel-body table-responsive">
435
		<table class="table table-striped table-hover table-condensed sortable-theme-bootstrap table-rowdblclickedit" data-sortable>
436
			<thead>
437
				<tr>
438
					<th><?=gettext("Domain")?></th>
439
					<th><?=gettext("IP")?></th>
440
					<th><?=gettext("Description")?></th>
441
					<th><?=gettext("Actions")?></th>
442
				</tr>
443
			</thead>
444

    
445
			<tbody>
446
<?php
447
foreach ($a_domainOverrides as $i => $doment):
448
?>
449
				<tr>
450
					<td>
451
						<?=$doment['domain']?>
452
					</td>
453
					<td>
454
						<?=$doment['ip']?>
455
					</td>
456
					<td>
457
						<?=htmlspecialchars($doment['descr'])?>
458
					</td>
459
					<td>
460
						<a class="fa fa-pencil"	title="<?=gettext('Edit domain override')?>" href="services_dnsmasq_domainoverride_edit.php?id=<?=$doment['idx']?>"></a>
461
						<a class="fa fa-trash"	title="<?=gettext('Delete domain override')?>" href="services_dnsmasq.php?act=del&amp;type=doverride&amp;id=<?=$doment['idx']?>"></a>
462
					</td>
463
				</tr>
464
<?php
465
endforeach;
466
?>
467
			</tbody>
468
		</table>
469
	</div>
470
</div>
471

    
472
<nav class="action-buttons">
473
	<a href="services_dnsmasq_domainoverride_edit.php" class="btn btn-sm btn-success btn-sm">
474
		<i class="fa fa-plus icon-embed-btn"></i>
475
		<?=gettext('Add')?>
476
	</a>
477
</nav>
478
<div class="infoblock">
479
<?php
480
print_info_box(
481
	'<p>' .
482
	gettext('If the DNS forwarder is enabled, the DHCP service (if enabled) will automatically' .
483
		    ' serve the LAN IP address as a DNS server to DHCP clients so they will use the forwarder.') . '</p><p>' .
484
	sprintf(gettext('The DNS forwarder will use the DNS servers entered in %1$sSystem > General Setup%2$s or' .
485
				    ' those obtained via DHCP or PPP on WAN if &quot;Allow DNS server list to be overridden by DHCP/PPP on WAN&quot; is checked.' .
486
				    ' If that option is not used (or if a static IP address is used on WAN),' .
487
				    ' at least one DNS server must be manually specified on the %1$sSystem > General Setup%2$s page.'),
488
			'<a href="system.php">',
489
			'</a>') .
490
	'</p>',
491
	'info',
492
	false
493
);
494
?>
495
</div>
496

    
497
<?php
498
include("foot.inc");
(121-121/223)